this post was submitted on 16 Nov 2023
213 points (93.8% liked)

Privacy

32045 readers
787 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Proton Mail, the leading privacy-focused email service, is making its first foray into blockchain technology with Key Transparency, which will allow users to verify email addresses. From a report: In an interview with Fortune, CEO and founder Andy Yen made clear that although the new feature uses blockchain, the key technology behind crypto, Key Transparency isn't "some sketchy cryptocurrency" linked to an "exit scam." A student of cryptography, Yen added that the new feature is "blockchain in a very pure form," and it allows the platform to solve the thorny issue of ensuring that every email address actually belongs to the person who's claiming it.

Proton Mail uses end-to-end encryption, a secure form of communication that ensures only the intended recipient can read the information. Senders encrypt an email using their intended recipient's public key -- a long string of letters and numbers -- which the recipient can then decrypt with their own private key. The issue, Yen said, is ensuring that the public key actually belongs to the intended recipient. "Maybe it's the NSA that has created a fake public key linked to you, and I'm somehow tricked into encrypting data with that public key," he told Fortune. In the security space, the tactic is known as a "man-in-the-middle attack," like a postal worker opening your bank statement to get your social security number and then resealing the envelope.

Blockchains are an immutable ledger, meaning any data initially entered onto them can't be altered. Yen realized that putting users' public keys on a blockchain would create a record ensuring those keys actually belonged to them -- and would be cross-referenced whenever other users send emails. "In order for the verification to be trusted, it needs to be public, and it needs to be unchanging," Yen said.

Curious if anyone here would use a feature like this? It sounds neat but I don't think I'm going to be needing a feature like this on a day-to-day basis, though I could see use cases for folks handling sensitive information.

you are viewing a single comment's thread
view the rest of the comments
[–] thesmokingman@programming.dev 1 points 1 year ago (1 children)

Untestable security claims for sensitive information are useless. I’m a huge fan of Proton and I’m excited to test this but only once the blockchain is public. Until then there is no way to verify the trust so there is no trust.

If you disagree, I might have something for you. I’ve got the strongest financial encryption known to man on top of the best transit system ever that makes it super easy to do stuff. It’s all based on blockchain, of course. Just give me your credit card info and bank details. It’s in beta so I won’t let you audit it, but unless you’re shilling you don’t have a problem with that.

[–] toomanyjoints69@lemmygrad.ml 0 points 1 year ago (1 children)

Its. In. Betaaaaaa

This is good for blockchain.

[–] thesmokingman@programming.dev 1 points 1 year ago (1 children)

Beta doesn’t negate security fundamentals ¯\_(ツ)_/¯

[–] toomanyjoints69@lemmygrad.ml 0 points 1 year ago (1 children)

Idk what part of Beta you dont understand.

[–] thesmokingman@programming.dev 1 points 1 year ago (1 children)

Yeah I guess I missed the part where security fundamentals weren’t supposed to be a part of a secure product. Do you mind explaining how a product centered on trust can be developed without trust? I think that would really help me understand why you think repeating the word “beta” allows a security-focused company to sidestep normal foundational components.

[–] toomanyjoints69@lemmygrad.ml 0 points 1 year ago (1 children)

When something is in Beta its not complete. That stuff can be added later!

[–] thesmokingman@programming.dev 1 points 1 year ago (1 children)

I think you’re missing “security fundamentals.”

[–] toomanyjoints69@lemmygrad.ml 0 points 1 year ago (1 children)

Security isnt needed when you are working fast and breaking things. How do you think man learned to fly?

[–] thesmokingman@programming.dev 1 points 1 year ago (1 children)

I don’t think we read the same article. We’re talking about a product those goal is secure verification of identity, correct? Something all about security?

[–] toomanyjoints69@lemmygrad.ml 1 points 1 year ago

I dont understand the problem you have with my reasoning. I think its air tight?