587 karma · joined March 31, 2017
1. does it also filter/escape ANSI Sequences in messages and author names? 2. does it block garbage collection? 3. how do you ensure that the developers are really the developers and there's no spoofing?
Sadly that ship has sailed, until a dollar/government backed blockchain which allows to do such things will pop up. Which won't happen i think
It is called rotting, because quite a few times critical vulnerabilities were found, but even former members of the GnuPG project could not convince Werner Koch to fix it before publication. Werner Koch also withholds updating the OpenPGP standard to make it up2date for current threatmodels. He's basically holding GnuPG hostage at that point and that threatens security. Sequoia tries to fix this, but Werner Koch does not want to change anything apparently.
> This is to say nothing of geopolitics. It's difficult for Europe to trust anything made in America. It was for this reason that Richard Stallman encouraged Germans to make encryption software, the import of which America allowed but the import of American encryption software in the Germany was illegal. This is why Werner Koch started gpg. Sequoia seems to be made by a foundation based in America. I doubt a significant following in Europe will pick it up.
Neither the NLlabs or the p=p foundation are set in america. Both are european efforts and in part paid by the european council. This is just FUD what you are telling here.
> Using the original gpg is a great way to show more international unity, but we all know that's a secondary reason to use software. The primary reason is that it's a quality piece of work that will be very difficult to reproduce.
Well, that is the same with sequoia which is basically made mostly by europeans which make much less money than all the consultants which produce daily cloudstuff which does not generate any value for society than taxes. to be honest, you should get your facts straight before telling FUD about seqouia.
https://en.opensuse.org/openSUSE:OpenSUSE_and_other_distribu... talks about over 120k packages and that page is from 2017...
Let me see if i can figure this out :D
Is there a way for people who have just 20 mbit/s up/downstream and do not have an stable IP addres from home behind NAT?
I would run a server for long for seeding if it would be over TOR.
just they build one for switch.
i hope they build a migrate one, where you can switch to new/other hashing standards.
So that we have a clear table of functions where implementations could test against.
sadly it got never picked up.
* implement and publish policies which emails you accept (regex/strings on domains, emails, headers, signatures and so on)
* found a association where all use this strict (which shall potentially be stricter than gmail and so on) settings and if gmail does not accept these emails, sue them for discrimination.
like, black/whitelist of regexes of emails-strings they just drop or domains they accept from, or headers they drop, or that they only accept mails which are signed by key x,y,z.
with that at least we could formalize that problem and services know what to expect.
also: they may want it dead, but still they use it for verification... so.. even they cannot kill the infrastructure apparently.
email can still be fixed, at least for semi-open systems. but noooo instead we build a myriad of other things.
Things to be fixed/extended:
* MIME * Support for SMIME/OpenPG Encryption with IMAP (like, when emails come into a imap inbox they are encrypted with a certain public key and signed with another, or when a email has to be saved, there's a standard, that emails can be saved encrypted in the inbox) * quite a few sieve extensions for more filtering/action possibilities * Publishing of Mailservers from whom they will/won't accept emails (or attachments) * better support of markdownn (markup/mime) type in emailreaders, there's even an rfc for it!
like... where is linux behind?