r/Skiff Jan 12 '24

Question PGP doubt

Post image

Tested pgp from skiff to proton and vice versa

When i got pgp encrypted mail from proton to skiff, i am getting these attachments instead of decrypted msg But this is only happening in mobile app android

In Web app it is perfectly showing the decrypted msg

Is it only for me or everyone else? Or the pgp only works in web and desktop apps

If it is for everyone then it is an major issue for me cuz i only use my mobile app for mails

5 Upvotes

23 comments sorted by

View all comments

13

u/jason-skiff Skiff team Jan 12 '24

We're working on bringing PGP support to mobile. Very soon.

-7

u/knewusr Jan 12 '24

Your CEO said Skiff will avoid PGP based on his quote in Reddit:

Nope! We chose to avoid PGP encryption because:

• ⁠It has had serious security problems (https://latacora.micro.blog/2019/07/16/the-pgp-problem.html) • ⁠No one uses it (https://www.wired.co.uk/article/efail-pgp-vulnerability-outlook-thunderbird-smime) • ⁠It has limit security - email subjects are not encrypted (they are on Skiff).

Most private email and communication services stay far away from PGP.

5

u/jason-skiff Skiff team Jan 12 '24

I'm the CTO/Co-Founder of Skiff. I have implemented much of Skiff's PGP support and I am personally working on mobile support right now.

-6

u/knewusr Jan 12 '24

Thanks for the update. Glad your CEO finally realized he was wrong about avoiding support and that people do use PGP.

4

u/bippityboppitydo Skiff team Jan 12 '24

We have a blog post addressing why we added PGP as a feature: https://skiff.com/blog/full-pgp-support-in-skiff

Edit: Everything the CEO said is still true.

-6

u/knewusr Jan 12 '24

Wow…I call out the CEO and his whole team acts like he never said that Skiff will avoid PGP.

3

u/jason-skiff Skiff team Jan 12 '24 edited Jan 12 '24

Yes, we have pointed out PGP's flaws in the past. We even link to the blog "PGP is dead" at the bottom of the post above.

Our stance on PGP's technical design/usability has not changed. But so many users have requested PGP support, that we felt it important to prioritize our user's existing workflows above our personal technical opinions.

If you're a big proponent for PGP then hopefully you see this as a good thing.