keyservers are dead. long live the keyserver.
👀

https://keys.thurin.id/pks/lookup?op=get&search=thurinlabs.eth
#pgp #ethereum

OCTADE Project Software : Signed Papers Portal

I am hacking on a cryptographic verification web portal. I seek comments and suggestions on the user interface (UX) and feature set.

Accessibility perspectives might be helpful since this involves slightly complex signatures and verification commands.

The server software automatically hashes and signs all files uploaded to the site. The software also generates 'verification bundles' that users may download to verify signatures using 'gnupg' and 'openssl'.

https://files.octade.net/publications/

Feedback would be helpful for improving the software before I release any source code.

#cryptography #cryptology #signatures #DataIntegrity #verification
#keys #gpg #pgp #openssl #crypto

[demo] https://files.octade.net/

I drafted a prototype for a PHP server application that automatically hashes and signs files and presents visitors with verification archives containing digital signatures for offline verification. The site allows readers to view, download, hash, and verify signatures of files. Since I occasionally like to publish puzzles and bits of cryptology, I just had to make this to scratch the old itch.

The neat thing about this design is that the current version has zero JavaScript. It uses CSS3 hacks with anchors and URL probing to emulate JavaScript and AJAX functionalities for modal dialogs to present server-side JSON data as HTML text.

When I upload files or documents to the server, the interface automatically presents them to the user in a grid. So now all I have to do is upload files and documents and the server generates the site.

The reader can then click buttons to hash, sign, view, verify, and download files.

GnuPG and OpenSSL Signatures are generated automatically on user demand. The site visitors can download these signatures and the public keys to verify files.

What should I add / change in the application and its interface?

What accessibility components might be warranted?

Should the application parse and present EXIF data, or is that too much?

#PHP #CSS3 #HTML5 #WebDesign #UX #cryptology #cryptography #crypto #signatures #OpenSSL #GnuPG #GPG #PGP #encryption #papers #preprints #documents #SelfHosted #WebLord #WebMaster #WebSerf #NoJS #Apache #CyberSecurity

@cryptography@soc.octade.net

Roundcube is a webmail client that supports end-to-end encryption via Mailvelope.

Mailvelope: https://mastodon.online/@blueghost/114037044753597341
Instructions: https://mailvelope.com/en/help/anywhere

TOR BROWSER NOTICE

Tor Project does not recommend installing plugins or add-ons because they can harm your privacy, weaken security, and make you easier to track.

Source: https://support.torproject.org/tor-browser/features/plugins

Website: https://roundcube.net

#Roundcube #Mailvelope #Encryption #E2EE #OpenPGP #PGP #GnuPG #GPG #FreeSoftware #FLOSS #FOSS #SoftwareLibre

Alt...

Roundcube logo.

Yay! We can now send and receive both OMEMO versions! It only took, like, three days to exchange basic text messages via #xmpp, using an already developed library. On the other hand, we now have a really solid base for...the nine billion other things we need to do. At some point I'm going to want interop testing volunteers who use conversations and gajim, because those clients aren't #accessible so I can't make sure they work. But that'll probably be in a few months. Also, TIL I learned that there's really no good C# library to do #PGP. So I'm not.

If it's possible for a user to send an unencrypted message across the wire on your "end-to-end encrypted" app, then it's not actually E2EE.

- This means that email can't be E2EE (because a user could easily hit reply without encrypting, accidentally sending the full conversation thread in plaintext).

- It refers to RCS texting, where, at least on Android, it will often drop down into unencrypted SMS when the RCS protocol is having trouble.

- It's the case for Matrix even, where E2EE is a setting that can switch on or off.

In no world would we accept an application as being encrypted between client and server if it was possible for packages to get sent in plaintext occasionally. We wouldn't put up with HTPPS occasionally sending HTML forms over HTTP on accident. Why do many people feel comfortable with the same issue when applied between two users, instead of a user and a server?

If it's possible to send a plaintext message in an E2EE platform, then the platform isn't really E2EE.

#encryption #security #privacy #email #pgp

RE: https://digitalcourage.social/@echo_pbreyer/116889627679596681

"As a result, mass scanning is now permitted again until 2028."

"A symbolic exemption was adopted for encrypted communications"

"The fact that Chat Control is moving forward against the will of the majority of voting MEPs is a farce and damages democracy."

"Blanket chat control is just as unacceptable as indiscriminately opening everyone’s physical mail."

#chatcontrol #pgp #gpg

" Governments have tried to use export controls to limit the proliferation of what they see as dangerous cyber technology for decades, but their track record has been middling at best.

The U.S. government was behind what is perhaps history’s most spectacular failure of this approach in the early to mid-1990s. At the time, computer scientists were developing encryption technologies to secure data as it traveled over the internet. One of those encryption products was called Pretty Good Privacy, or PGP, a popular software that could encrypt data and make it virtually impossible to unscramble even if intercepted as it traveled to its intended recipient over the internet.

The U.S. government initially saw PGP as a dangerous weapon, fearing it would prevent its intelligence agencies from snooping on emails as they crossed their wires. To stop the distribution of PGP, the U.S. Customs Service opened a criminal investigation against PGP’s creator Phil Zimmermann for allegedly violating arms export controls. He fought back by publishing PGP’s source code as a printed book, igniting what is known today as the “Crypto Wars.”

Zimmermann later won a key battle when the investigation was closed, paving the way for crucial end-to-end encryption algorithms such as the one used by billions of Signal and WhatsApp users."

https://techcrunch.com/2026/06/19/encryption-spyware-and-now-mythos-history-shows-why-cyber-export-control-doesnt-work/

#CyberSecurity #Encryption #PGP #Spyware #ExportControls #Fable #Mythos #AI #LLMs

Al Gore Invented the Internet.
Joe Biden invented PGP encryption.
Cypherpunks write code.

Joe Biden gifted humanity with PGP encryption (in a roundabout way). Phil Zimmermann created PGP in response to a anti-privacy bill clause proposed by Senator Joe Biden.

https://www.americanscientist.org/article/cypherpunks-write-code

"In 1990, the FBI launched an over-the-top crackdown on computer hackers, known as Operation Sundevil. This was swiftly followed, in early 1991, by a proposed piece of U.S. Senate legislation that would force electronic communications service providers to hand over people’s personal data. (The key clause, S.266, was pushed by the then chairman of the U.S. Senate Judiciary Committee, Senator Joe Biden.)"

"On learning of Biden’s S.266 clause, Zimmermann feverishly set out to complete the project, almost losing his house in the process. When he finished his software in 1991, he published it all online, free for anyone who wanted to use it. He called it “Pretty Good Privacy,” or PGP for short, and within weeks it had been downloaded and shared by thousands of people around the world. “Before PGP, there was no way for two ordinary people to communicate over long distances without the risk of interception,” said Zimmermann in a later interview. “Not by phone, not by FedEx, not by fax.” It remains the most widely used form of email encryption to this day."

https://www.congress.gov/bill/102nd-congress/senate-bill/266

"SEC. 2201. COOPERATION OF TELECOMMUNICATIONS PROVIDERS WITH LAW ENFORCEMENT. It is the sense of Congress that providers of electronic communications services and manufacturers of electronic communications service equipment shall ensure that communications systems permit the government to obtain the plain text contents of voice, data, and other communications when appropriately authorized by law."

#Biden #JoeBiden #PGP #Cypherpunks #Cypherpunk #PhilZimmermann #Privacy #Cybersecurity #Cryptography #GPG #Email #Senate #Law #Government #Panopticon #Hackers #Hacking #Security #Encryption

Delta Chat is a messaging platform that works over email.

Setup is similar to a email client.
Messaging is decentralized and interoperable.

Supports end-to-end encryption via PGP.
PGP encryption keys are created automatically.

Default desktop client is based on Electron.
Electron is based on the Google Chromium web browser.

Website: https://delta.chat
Mastodon: @delta

#DeltaChat #Messaging #Privacy #InfoSec #E2EE #OpenPGP #PGP #OpenSource #FOSS #CyberSecurity #Encryption #FreeSoftware

Alt...

Delta Chat logo.

Happy to report that about a year after getting a mate to communicate using Signal instead of WhatsApp, we just today made the progression to securing our emails via pgp. 🥳

He was already using Thunderbird as his email client, and although just a few clicks it was a James Bond meets Bill Gates moment when we sent and received encrypted, signed emails to one another. 🤓

[Per the anarchist theory of practice] I remain convinced this practice of changing how we behave on the internet with intention will continue to change the people engaging in it. Digital prefigurative politics, nibbling away at surveillance capitalism one little data set at a time.

Slowly slowly catchim' monkey...... 🐒

Happy days. 😀

#pgp #encryption #Thunderbird #privacy

I see some people still using ancient PGP keys. GnuPG offers Linux repositories for updating to the latest versions of GnuPG with new expert features for key generation. Recent versions support both Kyber1024 and Goldilocks448 keys (and more).

Once installed run: :~$ gpg --full-generate-key --expert

New GnuPG Repositories for Debian, Ubuntu, and Devuan: Stable and Development Branches Available

https://www.gnupg.org/blog/20250827-new-repository.html

#PGP #GPG #PQC #GnuPG #Encryption #Cryptography #Privacy #Signatures #Kyber #Goldilocks #ED448 #Keys #PublicKey

"Despite advancements in secure messaging, PGP (Pretty Good Privacy) encryption—developed in the 1990s—remains a gold standard for privacy. Unlike modern apps reliant on centralized servers or phone numbers, PGP ensures end-to-end encryption without third-party dependencies. This article explores PGP’s enduring relevance, key management best practices, and how it compares to contemporary solutions like Signal."

#PGP #GPG #Encryption #Messaging #Cryptography