[FoRK] Fwd: [IP] What It’s Like to Get a National-Security Letter

David Edmondson dme at dme.org
Mon Jul 1 08:23:08 PDT 2013


On Mon, Jul 01 2013, Ben (B.K.) DeLong wrote:
> I have to admit, I was using Penango with self-signed certs for quite a
> while to VERY EASILY encrypt my GMail accounts with little to no
> effort.

How did you validate the certificates of the people with whom you
exchanged encrypted mail?

penango.com says:
	"Penango automatically finds recipients' certificates so you can
	quickly send them encrypted e-mails."

That looks like a system ripe for abuse (by Penango).


More information about the FoRK mailing list