Just published a browser-based PGP tool

2015-10-07 Thread Joshua Terrill
-BEGIN PGP SIGNED MESSAGE-

Hash: SHA512


Hey everyone,


I just wanted to show you guys a site that I published, it's a
browser-based PGP tool that allows you to generate, encrypt, and decrypt
PGP messages. There's no server interaction, all of the functionality of
the site happens on the client. Right now it's pretty minimal and simple,
but I have plans to eventually turn it into a secure mobile messaging app
as well as adding more functionality such as signing, verifying, etc.


I am looking for some help as I move forward with this and would greatly
appreciate it if some of you would be willing to work on this with me;
whether it be with coding or brainstorming/offering advice and feedback.
I'm still somewhat new to encryption methods and could really use the help!
If you are interested, you know my email, and my public key can be found on
the contact page of the site if you want to use it.


https://www.pgp4web.com/


Thanks,

Josh

-BEGIN PGP SIGNATURE-

Version: GnuPG v1


iQIcBAEBCgAGBQJWFXSfAAoJEHZXnHymfkbcD2wQAIVXU/spn3E+zNwJ+tT00UDx

B0bSTFJ+22mxxnw+w+9eX8ctrl4fVCa7QWzpe6cu8q8beNGkrmD7gQtq1HgI70H7

PeoKsTz1awDgPlG9u0q8SvFjjdbqvi1woyxoEIeWh9pGbN2yCl+jlxtoLfEAAERN

Mtx+ad8OQsEfRHPgK3WngnJQfulGVrZfswjLrtOzWb+iOf8iQ9HZRTF8Y2kJ9mi4

NVaeibyRhM7uZfWhvAen03ixuWzZG9GHMwuL6Y3eIRn5QlIYWIDaCjkX03CKOx1B

vkbkVonmr+P7MrN0MoS2m74GurAxqTYSLrtW/ZxshSkYqHIvp46rCFugD4Ajs3Uv

H1jAjrP09sJUjDUMaiNYC9kEBqtrL/lhxuUTjAdh3eRMu2GyQMAeTNsb/D2p0ZCI

xG56p3LsgAhXPp2DGJCXGBSyI3wO9Uzt5Q3pdMk16PWwPIVLIJ8NXBstME7QjbcW

tU/Q6KV4+KMTa0u55X+fJ20LGwuStBdFId4ZoTl6Va/fjAKYwXzm3A1Y8z+EL7Ok

vinhbtf2SohUKndAQueSvbCYYamm5oCKtmCox34NaVTfw1LuwfeaAL0ok53loCwn

vBlBdJ1WY9gHhfogRnpwgt4SOkMdGY8s/GfKqgY2kcV903faUVKmkyzwFhdqOhQ3

3l771M348CWuPWjgPT74

=k4ia

-END PGP SIGNATURE-
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Just published a browser-based PGP tool

2015-10-08 Thread malte
Quoting Joshua Terrill (2015-10-07 21:38:52)
> https://www.pgp4web.com/

Hi,

why don't you contribute to projects that already do that?

https://whiteout.io
https://www.mailvelope.com/
https://encrypt.to/
http://www.openkeychain.org/
https://github.com/siacs/Conversations
https://modernpgp.org/

just to name a few.


Sincerely,

Malte

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Just published a browser-based PGP tool

2015-10-08 Thread Daniel Roesler
It looks like this is just a barebones unhosted OpenPGP interface. All
the others you listed try to do more (email, mobile apps, etc.). If I
just want to quickly encrypt/decrypt/sign/verify a file, this let's me
do it in seconds without any sort of signup or trouble.

Ideally, you could just download the source and open it locally for a
quick, cross-compatible OpenPGP user interface without having to
install anything or get admin privileges. I should work anywhere you
can open it in a browser (which is what I love about unhosted apps).

Really sad to see it isn't open source yet...

Daniel

On Thu, Oct 8, 2015 at 12:41 AM,   wrote:
> Quoting Joshua Terrill (2015-10-07 21:38:52)
>> https://www.pgp4web.com/
>
> Hi,
>
> why don't you contribute to projects that already do that?
>
> https://whiteout.io

An email app, not a straight

> https://www.mailvelope.com/
> https://encrypt.to/
> http://www.openkeychain.org/
> https://github.com/siacs/Conversations
> https://modernpgp.org/
>
> just to name a few.
>
>
> Sincerely,
>
> Malte
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Just published a browser-based PGP tool

2015-10-08 Thread malte
Quoting Daniel Roesler (2015-10-08 17:48:59)
> It looks like this is just a barebones unhosted OpenPGP interface. All
> the others you listed try to do more (email, mobile apps, etc.). If I
> just want to quickly encrypt/decrypt/sign/verify a file, this let's me
> do it in seconds without any sort of signup or trouble.

Yeah, no. Nothing related to OpenPGP can be done within seconds. Because
key managment. Because of key generation. Because the key material for
this app is stored exactly where? How is this a "cross-compatible
OpenPGP user interface" in a way that Enigmail is not, except that
Enigmail uses the native key managment facilities and is thus at least
more cross-compatible than the suggested solution?

Also OpenPGP en- and decryption does not happen in a vacuum. You don't
go like "Oh, lets just quickly encrypt that GIF to a random public
key.". There is a reason why most of the projects I suggested do email.
But I also suggested OpenKeyChain and I forgot http://gpg4usb.org/.


> Ideally, you could just download the source and open it locally for a
> quick, cross-compatible OpenPGP user interface without having to
> install anything or get admin privileges. I should work anywhere you
> can open it in a browser (which is what I love about unhosted apps).
> 
> Really sad to see it isn't open source yet...

I mean https://www.pgp4web.com/js/bundle.js is not obfuscated (except
the first line, I don't know what that is about). It's just 45000 lines
of code.


Sincerely,

Malte

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users