Re: [tor-talk] Fwd: Tor Browser Bundle: PGP encryption built-in?

["Fabio Pietrosanti (naif)" <lists@xxxxxxxxxxxxxxx>]

On 10/10/11 6:44 PM, Kyle L. Huff wrote:
> Another, more narrow approach would be to enforce within the plug-in
> that the URL of the page that the plug-in is embedded on must match the
> extension path. For example, the plug-in could detect if it was loaded
> on a page with the URL containing
> "chrome://.../{webpg-firefox-extension-path}/plugins/...", and refuse to
> load otherwise.

I would like to summarize that idea with some considerations:

Webpg-npani is not FireGPG
 * FireGPG is discontinued and it's ok if it has security
 * WebPG-npapi is an active project
 * WebPG hackers would be happy to work with Tor Project on integration

Security Improvements
 * Several security measures are already in development
 * Security could be always improved to satisfy various level of paranoy
 * Tor Community it's plenty of "truly certified paranoid hackers"(c)
and can work all together to define security requirements


* Data encryption is today only for power users

* Improve usability of end-to-end Encryption tools bringing it to the
masses:
  * Users are dumb
  * The users noways use a browser
  * Javascript encryption exists but have several drawbacks
  * Data encryption to be used by the user have to stay into the browser
  * A Browser PGP support is an enabling tool for encryption diffusion

Many different use-cases could be later implemented by a community.
  * Webmail plug-in for end-to-end GPG encryption
  * File upload of TorBrowserBundle could always provide an option to
encrypted the uploaded file regardless of the web application used
    * With PGP based on Public Key
    * With a PGP based symmetric password
  * File download of TorBrowserBundle could always allow decryption data
  * Simple plug-in could born to use the facility to encrypt text form
on social networks (vecna was working on a general tool to do data)
  * Other for sure would come

What do you think about it?

-naif
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk