🔐 Every unencrypted email is readable by 10+ entities and stored forever.
-
@seecurity @Fr333k You’re right that nothing in email crypto is ever “simple” — WKD doesn’t change the complexity of OpenPGP itself. However, it does solve a particular problem that has long blocked adoption: key discovery.
That doesn’t contradict the analogy with HTTPS — it’s about lowering friction, not erasing complexity.
And yes, S/MIME can be smoother in some contexts, but WKD gives domains a way to make OpenPGP more usable in practice.@nicfab @Fr333k Email crypto is extremely complex and because of this, has plenty of attack surface. We published close to 10 papers in the last seven years attacking email and email encryption with OpenPGP and S/MIME.
I am at the point where I find recommending email encryption to be actively harmful. Metadata leaks all over the place, crypto from the '90s, plaintext fallbacks everywhere, user hate it, in particular the gnupg devs are very toxic, mail client developers lack time and (too often) expertise to implement it properly.
Just use Signal. If you got budget, build an app on top of Signal. Heck, just use WhatsApp. Just don't even try to send sensitive information with email encryption.
-
@nicfab @Fr333k Email crypto is extremely complex and because of this, has plenty of attack surface. We published close to 10 papers in the last seven years attacking email and email encryption with OpenPGP and S/MIME.
I am at the point where I find recommending email encryption to be actively harmful. Metadata leaks all over the place, crypto from the '90s, plaintext fallbacks everywhere, user hate it, in particular the gnupg devs are very toxic, mail client developers lack time and (too often) expertise to implement it properly.
Just use Signal. If you got budget, build an app on top of Signal. Heck, just use WhatsApp. Just don't even try to send sensitive information with email encryption.
It’s true: email crypto has flaws and decades of technical debt. But saying “just use Signal or WhatsApp” trades one problem for another — centralized silos controlled by single entities, which is even worse for long-term resilience, governance, and privacy.
WKD won’t magically fix email, but it removes real barriers and raises the baseline. Abandoning open, federated protocols entirely in favor of walled gardens is not a sustainable path.
-
🔐 Every unencrypted email is readable by 10+ entities and stored forever.
Web Key Directory (WKD) changes this: automatic encryption using your domain name. No manual keys. No central servers. Just cryptographic certainty.
WKD makes encrypted email as simple as HTTPS made web browsing secure.
https://www.nicfab.eu/en/posts/wkd2/
#WebKeyDirectory #WKD #EmailEncryption #Privacy #InfoSec #Cryptography #OpenPGP
@nicfab I already have a webserver for my website using my own domain name, do I need a second one or is it possible to combine this somehow?
Really interesting, first I hear of it. Thanks for sharing it!
-
@nicfab I already have a webserver for my website using my own domain name, do I need a second one or is it possible to combine this somehow?
Really interesting, first I hear of it. Thanks for sharing it!
@chiefbongo WKD is for a single domain name only. They cannot be combined, but you can have multiple WKD configurations for numerous domain names on the server.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@grad mi viene in mente tutta una serie di nomi di italiani a favore della pace...di putin!
-
Leonardo, genio italiano
@anarchia
La mistificazione della realtà passa anche attraverso l’uso del linguaggio. Il nome di Leonardo è universalmente associato alla figura di uno dei più grandi geni della storia dell’umanità: pittore, scultore, scienziato e tanto altro ancora. Al suo nome si associano...Vedi l'articolo
https://www.rivoluzioneanarchica.it/leonardo-genio-italiano/
-
Stasera #PresaDiretta, come ogni domenica sera!
Giornalismo nel pubblico interesse
-
@GustavinoBevilacqua per esempio , per quel poco che ti “conosco”, a condividere molte cose interessanti , o a dare una mano. Il che mi sembra già una cosa bellissima !
Magari un giorno si riuscirà a bere una birretta da qualche parte ! Anche due eh…. che io ho sempre sete 😂🍻 E siccome non c’è due senza tre….. e fermarsi alla terza media è brutto…. 😂
-
-
"L’ex leader di Reform UK in Galles confessa: “Ho preso soldi da Mosca”. I laburisti attaccano Farage. Nathan Gill è stato una figura di spicco del partito di destra. Ha ammesso di aver ricevuto denaro per fare dichiarazioni a favore della Russia durante il mandato al Parlamento europeo."
https://www.ilfattoquotidiano.it/2025/09/28/lex-leader-di-reform-uk-in-galles-confessa-ho-preso-soldi-da-mosca-i-laburisti-attaccano-farage/
-
Sono stata via tre giorni e non sono mai riuscita ad espletare.
Rientrata oggi, ho cagato per tre volte.
L'equilibrio scorre potente in me.Mi focalizzo sulle cagate, metaforiche e letterali, perché altrimenti mi piglia il mal di vivere.
-
@bluebabbler @prealpinux è successo in quel periodo, ma credo che causa e effetto siano stati al contrario, che l'interesse sempre minore per i videonoleggi abbia fatto sì che i videonoleggi cercassero di tagliare i costi, passando alla modalità sportello bancomat
non che i videonoleggi automatici non ci fossero anche prima, è che prima tendevano ad essere dedicati a, diciamo, generi particolari
