You tell people not to use PGP, then recommend using Signal.
Signal requires a phone number and phone to sign up. The Signal backend server is run by Signal Messenger LLC. As far as I understand, you can't run your own backend server, there's some restriction there.
Signal's encryption is open and audited/auditable, and is convenient however it's not widely implemented in a public manner (Whatsapp and some other sites apparently use it; have consulted with Signal.)
I know PGP has flaws, the other replyee posted a link even.
But in less than 5 minutes, for free, and without violating my privacy to captchas or barbaric service terms, I can:
- Sign up for a brand new email address from a privacy respective service, on (almost) any device/system
- Generate a PGP keypair on (almost) any device/system
- Share the pubkey with a receiver
- Instantly send encrypted content
Is it more inconvenient than installing Signal? Yes, but it's far more flexible.
And I agree with the other replyee, this reply sounds more like a dislike of SHA-1, which is fine, rather than "don't use PGP".
Anyway, yes everyone who uses proprietary or anti-user messaging platforms should move to Signal/Matrix.
* The encrypted emails you send will transmit the headers in plaintext, including the sender, the recipient, and the subject line (which is message content!)
* Anyone who replies to your email unencrypted (which is the default way to reply, because email is insecure by default) will leak not just their own message but your encrypted message as well
* Every archived message will eventually leak
PGP offers you more control over the infrastructure, which might be valuable to you, but that control comes at a cost of reduced security. That's not an appropriate tradeoff for anyone who actually needs to send a secure message.
since when does Signal support emails? Sorry but a chat application is no replacement for async messaging.
> * Anyone who replies to your email unencrypted (which is the default way to reply, because email is insecure by default) will leak not just their own message but your encrypted message as well
This is major bullshit as they would have to know how to setup encryption to be able to decrypt your message in the first place, and all email clients I know will default to making the reply encrypted if the first message was encrypted in the first place.
> Every archived message will eventually leak
Even if that were remotely true, and it's not, the point is that you are able to TRANSMIT it over email in a safe way regardless of which provider you use. Archiving is besides the point.
> Signal isn't just more convenient; it's also more secure than your PGP encrypted emails.
Sure, but person to person email is not the only or even primary (for me) use case for GPG/PGP encryption.
The second line of the linked article says: " ... and a program to verify detached signatures geared towards software distribution systems called sqv." - a use case for which Signal is completely useless.
Signal is great for what it does, so long as you're prepared to accept it's current "needs to use real phone numbers and spams your Signal signup to everyone with your phone number in their contact list" behaviour. But keep in mind those are thew tradeoffs it's making for key distribution (and not everybody considers them to be "the right" tradeoffs). PGP/GPG ket distribution is a complete mess, which is why it's such a poor thing for cold-call person to person encrypted messages (even ignoring all the unencrypted metadata issues), BUT there's no way for me to use Signal in a bunch of scripts mailing database backups from servers, or to send intrusion detection notification emails, or to verify software repo downloads. Those are all areas where PGPs key distribution nightmare are not problems, and where PGP's "old school" long lasting keys are less of a problem. And there's _lots_ of those kinds of things in the world using PGP right now. new clean PGP implementations are a good thing for those - even though I'm not about to get all 1994 again and start emailing my friends using PGP...
Come on, it's true that sender, recepient, and time is valuable metadata that you may wish to obscure depending on one's security context, but if you are leaking sensitive information in the subject line of your pgp-encrypted emails that's on you... Why not just encrypt the subject?
I can't speak for Anbox support on Pinephone, but regarding your bank's Android app it probably uses Google Safetynet, which I don't think Anbox has support for, or will ever support. Without Safetynet the app will probably not function, or will function with limited features.
Ironically I'll link a Samsung [1] but there are options.
Home theater enthusiasts (ugh) will of course berate you because "YOu'RE PaYING MORE For LESS FeAATURES!!", which is true. I haven't yet found a commercial display offering Dolby Vision.
The term you're looking for is "Commercial Signage" or "Large-Format Displays" [1]
This is of course US based but there are other vendors for North America, and I'm sure for EuroAsia and beyond.
You're paying more for the fact that some models are built to last longer, and the fact there's no wireless or smart junk.
> You're paying more for the fact that some models are built to last longer
Not just built to last longer, but built to last in a lot of different environments (heat, cold, humidity, vandalism, vibrations) whereas consumer TVs are optimized to run at 20-25 °C in a home where they will be rarely moved. The QA on the panels is much more rigorous, too (it's the same thing as with Intel CPUs, the yield on panels hitting the standards for commercial signage is lower than your average consumer TV).
Also, you'll be getting spare parts for these in a decade if you need it (or, at the very least, can purchase a new device with identical specs in that time), there will be support from the manufacturer over that time, and more often than not you'll be able to find decent documentation about how to integrate them into whatever you're building.
And: some of these carry amazing features. Some two years ago when I was doing videography stuff for an event, there were four 60 inch full-HD monitors in a 2x2 grid - supplied with one DVI cable for the signal that was passed between them using in daisy chain mode, they were configurable to run in grids of up to 4x4 I believe, and the monitors simply took the incoming signal, cropped their section out of it, and displayed it scaled. Was a hell of a lot of fun playing with them.
From their last major newsletter they are planning cable service rollout eventually, probably on Rogers. It's active in some low-income housing already I think.
The stopper for Bell Fiber FTTH is Bell blocking resale of service on their pure fiber lines to 3rd parties. I don't remember any specific dates but the CRTC is bound to hopefully force their hand one day.
I am too hoping they one day offer it, I love NCF.
Hello fellow NCF user! I love their network and customer services.
The price is higher than other 3rd parties but everything else about them is perfect for an ISP. Painless, accessible, simple signup with excellent, stable service.
You tell people not to use PGP, then recommend using Signal.
Signal requires a phone number and phone to sign up. The Signal backend server is run by Signal Messenger LLC. As far as I understand, you can't run your own backend server, there's some restriction there. Signal's encryption is open and audited/auditable, and is convenient however it's not widely implemented in a public manner (Whatsapp and some other sites apparently use it; have consulted with Signal.)
I know PGP has flaws, the other replyee posted a link even. But in less than 5 minutes, for free, and without violating my privacy to captchas or barbaric service terms, I can:
- Sign up for a brand new email address from a privacy respective service, on (almost) any device/system
- Generate a PGP keypair on (almost) any device/system
- Share the pubkey with a receiver
- Instantly send encrypted content
Is it more inconvenient than installing Signal? Yes, but it's far more flexible.
And I agree with the other replyee, this reply sounds more like a dislike of SHA-1, which is fine, rather than "don't use PGP".
Anyway, yes everyone who uses proprietary or anti-user messaging platforms should move to Signal/Matrix.