[Users] autocrypt

[Michael A. Yetto]

On Mon, 4 Dec 2017 10:15:40 +0100
Andrej Kacian <andrej at kacian.sk> writes, and having writ moves on:

>On Fri, 1 Dec 2017 16:51:31 +0100
>Michael <codejodler at gmx.ch> wrote:
>
>> What do you think about https://autocrypt.org ?  
>
>It looks... interesting, I guess, although I haven't had the time yet
>to fully read what it is about. From the brief glance I assume it is
>some sort of user-friendly verification framework built on top of PGP
>keys?
>

Does this quote make it appear to be built on a framework of PGP, or
one of Warm-Fuzzy.

"Autocrypt first aims to provide convenient encryption that is neither
perfect nor as secure as traditional e-mail encryption, but is
convenient enough for much wider adoption."

Verification seems to be controlled, or at the least strongly influenced
 by, the party wishing to be verified. No method is mentioned
for avoiding man-in-the-middle attacks. 

Mike Yetto
-- 
"Skeptical scrutiny is the means, in both science and religion, by which
deep thoughts can be winnowed from deep nonsense"
 - Carl Sagan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.claws-mail.org/pipermail/users/attachments/20171204/5aa448a6/attachment.sig>