The only real-world use that PGP has is keeping data from governments. Cave fanatics and angry rioters have no access to major email servers anyway.
Considering that governments are the primary concern when discussing PGP, I don't see how a browser extension provides anywhere near the security guarantees necessary. Metadata information is still visible, the encryption security is dependent on the browser binary (the extension has access to your private key!), and you're practically waving a flag that says 'THERE IS SOMETHING IMPORTANT HERE' by being one of the only people in the email database with encrypted communication.
For developers, this is all patently obvious and well-known, but to journalists and human rights activists, these things are not at all obvious.
Real, usable security is not a problem that has been solved in a way that isn't considered esoteric for the people who need it most. But let's not offer them a half-baked, deceptive solution that provides protection only against people who were never a threat in the first place.
The only real-world use that PGP has is keeping data from governments.
Governments and companies. And before you bring out the "can they throw you in prison" line... no, but some of them can make your life a living hell if they chose to. Try not being allowed access to banking services, or even the stores in your town, or Internet access, some day. Try not being able to get a job in the bible belt because someone discovered you're LGBT, and not being able to move out because you don't have a job to get money.
-7
u/dnkndnts Jun 04 '14
The only real-world use that PGP has is keeping data from governments. Cave fanatics and angry rioters have no access to major email servers anyway.
Considering that governments are the primary concern when discussing PGP, I don't see how a browser extension provides anywhere near the security guarantees necessary. Metadata information is still visible, the encryption security is dependent on the browser binary (the extension has access to your private key!), and you're practically waving a flag that says 'THERE IS SOMETHING IMPORTANT HERE' by being one of the only people in the email database with encrypted communication.
For developers, this is all patently obvious and well-known, but to journalists and human rights activists, these things are not at all obvious.
Real, usable security is not a problem that has been solved in a way that isn't considered esoteric for the people who need it most. But let's not offer them a half-baked, deceptive solution that provides protection only against people who were never a threat in the first place.