# pgp Published articles for pgp. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Why encrypted email remains unsafe, according to the article DevFeed: [Why encrypted email remains unsafe, according to the article]() Original publisher: [Read original article]() Published: 2020-02-19T18:50:00Z Content type: opinion Language: en Sources: [Latacora]() Topics: [email](), [Encryption](), [Cryptography](), [Security](), [Internet]() Tags: [cryptography](), [email](), [encryption](), [internet](), [messages](), [pgp](), [privacy](), [security](), [signal]() ### AI overview The article argues that encrypted email remains unsafe even if flaws in current tools such as PGP are fixed. It attributes the problem to email's plaintext-oriented foundations and the likelihood of unencrypted replies, and advises against sending messages that require serious security over email. ### Source excerpt Email is unsafe and cannot be made safe. The tools we have today to encrypt email are badly flawed. Even if those flaws were fixed, email would remain unsafe. Its problems cannot plausibly be mitigated. Avoid encrypted email. Technologists hate this argument. Few of them specialize in cryptography or privacy, but all of them are interested in it, and many of them tinker with encrypted email tools. Most email encryption on the Internet is performative, done as a status signal or show of solidarity. Ordinary people don't exchange email messages that any powerful adversary would bother to read, and for those people, encrypted email is LARP security. It doesn't matter whether or not these emails are safe, which is why they're encrypted so shoddily. ## PGP's Legacy Design and Cryptographic Deficiencies DevFeed: [PGP's Legacy Design and Cryptographic Deficiencies]() Original publisher: [Read original article]() Published: 2019-07-17T01:14:00Z Content type: opinion Language: en Sources: [Latacora]() Topics: [Cryptography](), [Encryption](), [Security, Privacy and Abuse Prevention]() Tags: [certificates](), [compression](), [crypto](), [cryptography](), [defects](), [parsing](), [passwords](), [pgp](), [signing]() ### AI overview This commentary argues that PGP has significant design and cryptographic deficiencies rooted in its 1990s origins. It examines the complexity of PGP's packet structure, key management, parsing, compression, signing, and encryption features. ### Source excerpt Cryptography engineers have been tearing their hair out over PGP's deficiencies for (literally) decades. When other kinds of engineers get wind of this, they're shocked. PGP is bad? Why do people keep telling me to use PGP? The answer is that they shouldn't be telling you that, because PGP is bad and needs to go away. There are, as you're about to see, lots of problems with PGP. Fortunately, if you're not morbidly curious, there's a simple meta-problem with it: it was designed in the 1990s, before serious modern cryptography. No competent crypto engineer would design a system that looked like PGP today, nor tolerate most of its defects in any other design. Serious cryptographers have largely given up on PGP and don't spend much time publishing on it anymore (with a notable exception). Well-understood problems in PGP have gone unaddressed for over a decade because of this. ## Elliptic Curve Cryptography: a gentle introduction DevFeed: [Elliptic Curve Cryptography: a gentle introduction]() Original publisher: [Read original article]() Author: andreacorbellini Published: 2015-05-17T11:24:00Z Content type: article Language: en Sources: [Andrea Corbellini]() Topics: [Cryptography](), [ECDSA](), [public key](), [Algorithms, Complexity](), [Encryption]() Tags: [bitcoin](), [cryptography](), [dh](), [dsa](), [ecc](), [ecdh](), [ecdsa](), [examples](), [guide](), [math](), [pgp](), [public-key](), [rsa](), [security](), [ssh](), [tls](), [tools](), [web]() ### AI overview A gentle introduction to elliptic curve cryptography explains elliptic curves, their use in public-key cryptography, and why ECC is considered secure. The series covers finite fields, the discrete logarithm problem, ECDH, ECDSA, attacks on ECC, and comparisons with RSA. ### Source excerpt Those of you who know what public-key cryptography is may have already heard of ECC, ECDH or ECDSA. The first is an acronym for Elliptic Curve Cryptography, the others are names for algorithms based on it. Today, we can find elliptic curves cryptosystems in TLS, PGP and SSH, which are just three of the main technologies on which the modern web and IT world ... ## Why the author says their PGP key can be signed based on a Twitter statement DevFeed: [Why the author says their PGP key can be signed based on a Twitter statement]() Original publisher: [Read original article]() Published: 2013-12-16T16:51:25Z Content type: opinion Language: en Sources: [Signs of Triviality]() Topics: [trust](), [X (Twitter)]() Tags: [pgp](), [trust](), [twitter]() ### AI overview The article argues that the author's PGP key can be signed based solely on the author's statement on Twitter. ### Source excerpt Why you can sign my PGP key just because I say so (on Twitter). ## Sharing Secrets Using SSH Keys DevFeed: [Sharing Secrets Using SSH Keys]() Original publisher: [Read original article]() Published: 2012-11-19T18:03:10Z Content type: tutorial Language: en Sources: [Signs of Triviality]() Topics: [ssh]() Tags: [pgp](), [secrets](), [ssh]() ### AI overview The article suggests using SSH keys to share secrets when collaborators are not familiar with PGP. ### Source excerpt Your peeps don't grok PGP? Don't fret - use SSH keys.