[{"data":1,"prerenderedAt":495},["ShallowReactive",2],{"project-5981446":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":44,"post_text":45,"what":46,"said":81,"maker_in_thread":191,"shape":198,"grid":202,"attempts":456,"same_week":457,"maker_shows":384,"maker_hidden":487,"reader_version":488,"card":489},"5981446","Streak Secure Gmail","Easy Email Encryption inside Gmail (Alpha, Open-Source)","title","Show HN: Easy Email Encryption inside Gmail (Alpha, Open-Source)","https:\u002F\u002Fwww.streak.com\u002Fsecuregmail","streak.com","alooPotato",1372808542,2013,170,98,95,1739,6,"notable","security_privacy","email encryption","browser_extension",[21,24,25,26],"gmail encryption","symmetric encryption","webmail privacy","roasted",-0.488,{"positive":18,"neutral":30,"mixed":31,"critical":32},12,1,24,43,{"idea":35,"privacy":38,"execution":40,"design":43},{"positive":36,"critical":37},4,5,{"positive":39,"critical":30},2,{"positive":41,"critical":42},0,3,{"positive":41,"critical":42},[37,31,37,31,42,41,41,41,42,41,41,41,41,41,41,41,41,41,41,37,31,42,42,31,31,41,42,31,31,31,42,31,31,31,41,31,41,39,31,31],null,{"problem":47,"audience":54,"pricing":45,"motivation":61,"time_to_build":45,"stack":65,"openness":78,"stage":79,"team_size":80},{"value":48,"source":49,"evidence":50},"Keeps webmail providers from reading email content by encrypting messages locally","maker",[51],{"id":52,"by":11,"text":53},"5981447","We built this extension to see if it was possible to prevent webmail providers from handing over your email data to other parties. We encrypt the email message on the local…",{"value":55,"source":49,"evidence":56},"Average Gmail users who need encrypted email without key management",[57,58],{"id":52,"by":11,"text":53},{"id":59,"by":11,"text":60},"5981686","Actually we went down the gpg public\u002Fprivate key path first, and realized that was way worse in terms of usability. Even though with symmetric you have to enter the password, at…",{"value":62,"source":49,"evidence":63},"Test whether webmail providers can be prevented from accessing email data",[64],{"id":52,"by":11,"text":53},[66,70],{"value":67,"source":49,"evidence":68},"Stanford JavaScript Crypto Library (sjcl)",[69],{"id":52,"by":11,"text":53},{"value":71,"source":72,"evidence":73},"Chrome extension","commenter",[74],{"id":75,"by":76,"text":77},"5981523","pcwalton","NB: This is Chrome-only.","open_source","prototype","team",{"praise":82,"objections":99,"requests":130,"questions":150,"alternatives":165},[83,91],{"value":84,"source":72,"evidence":85},"Usability is a strong point compared with PGP-based tools",[86,87],{"id":59,"by":11,"text":60},{"id":88,"by":89,"text":90},"5981958","smarterat","My thanks to you and your team for having developed this. The cost of crypto is, at present, far too high for mainstream use - or so it seems. Undoubtedly, the challenges…",{"value":92,"source":72,"evidence":93},"Open source and an encryption-by-default approach are welcome",[94,95],{"id":52,"by":11,"text":53},{"id":96,"by":97,"text":98},"5984557","Osmium","Number of recipients seems like a good idea for separating personal and business to me too. Personally, I only use PGP for emails with my partner, but we definitely send way in…",[100,111,122],{"value":101,"source":72,"evidence":102},"Browser JavaScript cannot provide real security against code injection or Google itself",[103,107],{"id":104,"by":105,"text":106},"5981808","IgorPartola","From the Stanford JS Crypto library's page: > (Unfortunately, this is not as great as in desktop applications because it is not feasible to completely protect against code…",{"id":108,"by":109,"text":110},"5984932","drdaeman","Yup, totally secure. Unless Google's secretly forced to add something along the lines of $(document).on(\"change\", \"input.streak__password\", function () { $.post(...); });…",{"value":112,"source":49,"evidence":113},"Symmetric passphrase security depends on password strength",[114,115,119],{"id":52,"by":11,"text":53},{"id":116,"by":117,"text":118},"5982359","Sami_Lehtinen","How is key reuse is avoided? It's even harder for users to maintain (separate random) key for every message. All the classical OTP key issues are here. Aka different message,…",{"id":120,"by":11,"text":121},"5982745","Agreed - quality of a password is the key. We wanted to start with something that regular people would actually use. Its current;y not the most secure solution - but we were…",{"value":123,"source":72,"evidence":124},"Chrome-only and no attachment or search support",[125,126],{"id":75,"by":76,"text":77},{"id":127,"by":128,"text":129},"5981960","igmor","how would you do attachments and search? Big stopper for me for using something like this.",[131,135,142],{"value":132,"source":72,"evidence":133},"Support for attachments and search",[134],{"id":127,"by":128,"text":129},{"value":136,"source":72,"evidence":137},"Cross-platform support",[138],{"id":139,"by":140,"text":141},"5983394","drmr","It's too bad that firepgp couldn't keep up with the gmail api changes and eventually was aborted. The few times I used it felt pretty good. This chrome-only alpha software…",{"value":143,"source":72,"evidence":144},"Public key option or key exchange approach",[145,146],{"id":88,"by":89,"text":90},{"id":147,"by":148,"text":149},"5981874","dbpatterson","Browsers just need to actually get on the security bandwagon and build support for public key crypotagraphy into an api. Then you could generate keys, export them to back them up…",[151,158],{"value":152,"source":72,"evidence":153},"Does Gmail still upload drafts or data while typing",[154],{"id":155,"by":156,"text":157},"5981559","lmgftp","Just curious, but how can we be sure that GMail doesn't continue to do voodoo like uploading a copy of draft without complete transparency? i.e. will this also disable any…",{"value":159,"source":72,"evidence":160},"Is the encryption export-legal and how strong is AES-256",[161],{"id":162,"by":163,"text":164},"5982143","sldjfwsiojf","What is the legality of this? I'm concerned that in general cryptography web products are potentially illegal…",[166,173,177,184],{"value":167,"source":72,"evidence":168},"Mailvelope (OpenPGP in Gmail)",[169],{"id":170,"by":171,"text":172},"5983659","jmvidal","Mailvelope http:\u002F\u002Fwww.mailvelope.com\u002F uses OpenPGP and is nicely integrated with gmail.",{"value":174,"source":72,"evidence":175},"FireGPG",[176],{"id":139,"by":140,"text":141},{"value":178,"source":72,"evidence":179},"Parley",[180],{"id":181,"by":182,"text":183},"5982513","napoleond","We're trying an approach with http:\u002F\u002Fparley.co that involves storing a symmetrically encrypted OpenPGP keyring on the server for our users. That, combined with a UI that…",{"value":185,"source":72,"evidence":186},"Hushmail",[187],{"id":188,"by":189,"text":190},"5983448","jlgaddis",">> storing a symmetrically encrypted OpenPGP keyring on the server > now THAT is the way to do it! Um, no. No, it absolutely is not. See also: Hushmail.",{"comments":37,"answered":31,"key":192},[193,194,197],{"id":52,"text":53},{"id":195,"text":196},"5982733","I think the distinction is that the receiver need not have signed up or installed anything at the time the message is sent. That is, the sender need not worry if the receiver is…",{"id":59,"text":60},{"commenters":199,"max_depth":200,"maker_replies":37,"first_comment_mins":41,"lifespan_hours":201},56,9,35,[203,205,209,213,217,221,224,227,230,231,234,237,240,243,245,246,250,253,255,257,261,263,265,267,270,274,276,278,281,284,287,288,290,292,294,297,299,301,304,307,309,311,314,317,320,322,325,328,330,332,335,336,340,342,344,345,348,350,353,355,357,359,362,365,368,371,372,374,377,379,382,386,389,391,393,395,398,401,404,407,409,410,413,415,418,421,424,426,428,431,433,438,442,444,447,449,451,453],[52,41,41,204,11,31],"maker\u002Fneutral\u002Fidea",[206,41,37,207,208,41],"5981519","project\u002Fpositive\u002Fidea","h34t",[210,41,31,211,212,41],"5981528","project\u002Fcritical\u002Fidea","anemitz",[214,41,31,215,216,41],"5981552","project\u002Fcritical\u002Fprivacy","StavrosK",[218,41,41,219,220,41],"5981560","commenter\u002Fneutral\u002Fnone","joebadmo",[222,41,37,223,216,41],"5981573","project\u002Fpositive\u002Fprivacy",[225,41,42,204,226,41],"5981631","OmarIsmail",[228,41,31,211,229,41],"5982315","gholap",[195,41,41,204,11,31],[232,41,37,207,233,41],"5981841","CPAhem",[235,31,31,211,236,41],"5981633","rdl",[238,31,41,239,212,41],"5981677","other\u002Fneutral\u002Fnone",[241,31,41,239,242,41],"5983077","jbraithwaite",[244,31,41,239,236,41],"5983465",[59,31,41,204,11,31],[247,31,41,248,249,41],"5982162","commenter\u002Fneutral\u002Fidea","ams6110",[251,31,41,219,252,41],"5982885","recursive",[254,31,41,219,189,41],"5983454",[256,31,41,219,252,41],"5984819",[258,31,42,259,260,41],"5982191","project\u002Fneutral\u002Fidea","dfc",[262,31,42,259,249,41],"5982228",[264,31,42,259,236,41],"5984009",[181,31,41,266,182,41],"other\u002Fpositive\u002Fidea",[268,31,41,266,269,41],"5982559","devinhosea",[271,31,41,272,273,41],"5982590","other\u002Fneutral\u002Fidea","kbaker",[275,31,41,219,182,41],"5982609",[277,31,41,272,182,41],"5982601",[279,31,41,280,97,41],"5982763","other\u002Fcritical\u002Fpricing",[282,31,41,283,182,41],"5984283","other\u002Fneutral\u002Fpricing",[285,31,41,283,286,41],"5984480","lmm",[96,31,41,283,97,41],[289,31,41,283,182,41],"5984756",[291,31,41,283,236,41],"5984569",[293,31,41,239,182,41],"5984773",[295,31,41,272,296,41],"5983437","grepular",[298,31,41,272,182,41],"5984298",[188,31,41,300,189,41],"other\u002Fcritical\u002Fprivacy",[302,31,41,303,182,41],"5984225","other\u002Fneutral\u002Fprivacy",[305,31,41,303,306,41],"5984843","scoot",[308,31,41,303,182,41],"5985676",[310,31,41,303,306,41],"5986173",[312,31,41,219,313,41],"5982586","medde",[315,31,41,303,316,41],"5982395","acabal",[318,31,41,303,319,41],"5982518","jacquesgt",[321,31,41,303,242,41],"5983104",[323,31,41,239,324,41],"5983397","nickf",[326,31,41,239,327,41],"5983648","m_eiman",[329,31,41,239,316,41],"5984628",[331,31,37,207,97,41],"5982747",[333,31,41,239,334,41],"5983132","grey-area",[147,39,31,211,148,41],[337,39,42,338,339,41],"5982080","project\u002Fneutral\u002Fprivacy","LoganCale",[341,39,41,239,249,41],"5982192",[343,39,41,239,105,41],"5983734",[104,42,31,215,105,41],[346,42,37,223,347,41],"5981995","benregenspan",[349,42,31,215,105,41],"5983721",[351,42,41,239,352,41],"5984481","grimtrigger",[354,42,31,215,105,41],"5984649",[356,42,31,211,249,41],"5982207",[358,36,41,204,11,31],"5981676",[360,36,41,272,361,41],"5981775","tmzt",[363,36,41,272,364,41],"5981821","lukeschlather",[366,36,41,239,367,41],"5982667","arkem",[369,36,37,370,229,41],"5982344","maker\u002Fpositive\u002Fidea",[155,37,31,215,156,41],[373,37,31,215,212,41],"5981582",[375,37,42,376,226,41],"5981634","maker\u002Fneutral\u002Fexecution",[88,18,42,378,89,41],"project\u002Fmixed\u002Fprivacy",[162,380,31,381,163,41],7,"project\u002Fcritical\u002Fnone",[383,384,31,215,385,41],"5981604",8,"zobzu",[387,384,42,388,226,41],"5981636","maker\u002Fneutral\u002Fprivacy",[390,384,31,215,212,41],"5981658",[392,384,42,388,226,41],"5981673",[394,384,42,338,361,41],"5981795",[396,384,31,215,397,41],"5981681","ryan-c",[399,200,41,272,400,41],"5982696","mtgx",[402,200,41,272,403,41],"5982991","phreeza",[405,200,41,272,406,41],"5982996","bhashkarsharma",[116,408,31,215,117,41],10,[120,408,41,388,11,31],[75,411,31,412,76,41],11,"project\u002Fcritical\u002Fexecution",[170,30,41,414,171,41],"other\u002Fpositive\u002Fnone",[416,30,41,239,417,41],"5984256","hackmiester",[419,30,41,239,420,41],"5989988","unhammer",[422,30,41,414,423,41],"5984630","znq",[108,425,31,215,109,41],13,[139,427,31,412,140,41],14,[429,427,41,414,430,41],"5984597","alyandon",[432,427,41,239,420,41],"5989993",[434,435,31,436,437,41],"5981510",15,"project\u002Fcritical\u002Fdesign","shravan",[439,435,42,440,441,41],"5981595","maker\u002Fneutral\u002Fdesign","Hilyin",[443,435,42,440,226,41],"5981665",[445,435,31,436,446,41],"5982973","baal80spam",[448,435,31,436,417,41],"5984752",[127,450,31,412,128,41],16,[452,450,31,215,400,41],"5982721",[454,455,42,204,229,41],"5985464",17,[],[458,463,468,473,477,482],{"id":459,"name":460,"points":461,"category":462},"5985793","HN Jobs",149,"web_saas",{"id":464,"name":465,"points":466,"category":467},"5969535","Chicken chicken chicken",147,"languages",{"id":469,"name":470,"points":471,"category":472},"5973595","Glass Tesla",96,"consumer_social",{"id":474,"name":475,"points":16,"category":476},"5965673","Kite","dev_tools",{"id":478,"name":479,"points":480,"category":481},"5986176","Bitcoins with Friends",67,"finance_crypto",{"id":483,"name":484,"points":485,"category":486},"5974748","OAuth.io",66,"infrastructure",false,"v2",{"id":490,"name":5,"line":6,"ai":487,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":491,"top":18,"kw":492,"maker":11,"domain":10,"tier":19,"attempts":41,"strip":493,"url":9,"mix":494,"praise":84,"objection":101,"sub":21},5981446,-0.49,[21,24,25,26],"5151300030000000000513311031113111010211",[18,30,31,32],1794036507927]