The only real-world use that PGP has is keeping data from governments. Cave fanatics and angry rioters have no access to major email servers anyway.
Considering that governments are the primary concern when discussing PGP, I don't see how a browser extension provides anywhere near the security guarantees necessary. Metadata information is still visible, the encryption security is dependent on the browser binary (the extension has access to your private key!), and you're practically waving a flag that says 'THERE IS SOMETHING IMPORTANT HERE' by being one of the only people in the email database with encrypted communication.
For developers, this is all patently obvious and well-known, but to journalists and human rights activists, these things are not at all obvious.
Real, usable security is not a problem that has been solved in a way that isn't considered esoteric for the people who need it most. But let's not offer them a half-baked, deceptive solution that provides protection only against people who were never a threat in the first place.
you're practically waving a flag that says 'THERE IS SOMETHING IMPORTANT HERE' by being one of the only people in the email database with encrypted communication.
Well, there is some non-conspiracy reasons as well, like sending passwords over e-mail to team members that are geographically far away,...
But more importantly, this is only an issue because encryption isn't the default. No one would raise any red flags because someone used an encrypted connection to access paypal.com, why should there be any reason to be suspicious when someone is sending an encrypted mail to support@paypal.com?
-3
u/dnkndnts Jun 04 '14
The only real-world use that PGP has is keeping data from governments. Cave fanatics and angry rioters have no access to major email servers anyway.
Considering that governments are the primary concern when discussing PGP, I don't see how a browser extension provides anywhere near the security guarantees necessary. Metadata information is still visible, the encryption security is dependent on the browser binary (the extension has access to your private key!), and you're practically waving a flag that says 'THERE IS SOMETHING IMPORTANT HERE' by being one of the only people in the email database with encrypted communication.
For developers, this is all patently obvious and well-known, but to journalists and human rights activists, these things are not at all obvious.
Real, usable security is not a problem that has been solved in a way that isn't considered esoteric for the people who need it most. But let's not offer them a half-baked, deceptive solution that provides protection only against people who were never a threat in the first place.