Re: [ESD-translators] mailvelope Re: pEp

[Ineiev]

On Sat, Jul 28, 2018 at 11:36:12AM +0200, Tomas Stary wrote:
> 
> Quite true, depends on the level of thread you are trying to protect
> yourself against.
> 
> If it is profiling from automated text-analysers for advertisement
> purposes, you are probably safe.
>
> If it is targeted attack on your person by intelligence services you
> might not be.

Agreed, the threat model matters a lot.

> Good point. In mailvelope they tried to address it by "security
> background" image. Quote:
> 
> """
> The security background helps prevent user interface manipulations by
> third-party websites and applications. To increase security, create and
> change your customized Mailvelope background here.
> """

Yes, and this is what made me sceptical. I think this is not the level
of protection I'm used to expect from cryptography: my attacker "just"
needs to know what my controls look like.

signature.asc
Description: Digital signature