|
Title: Automated PGP PMs in forum Post by: chsados on May 30, 2013, 12:06:54 AM I am imagining a forum where private messages between users are automatically PGP encrypted behind the scenes. I am imagining where one would have to upload their public key to their profile page and somehow when Sam private messages Sally the server locates Sally's public key, encrypts Sam's message and then delivers a PGP ASCII message to Sally's inbox.
Does anyone know if any current forum software has a feature like this? If not, how do you think it could be done? Title: Re: Automated PGP PMs in forum Post by: theymos on May 30, 2013, 12:20:15 AM It can't be done without a browser addon unless you want the forum to have your private key.
Title: Re: Automated PGP PMs in forum Post by: 🏰 TradeFortress 🏰 on May 30, 2013, 09:27:39 AM It can't be done without a browser addon unless you want the forum to have your private key. The forum doesn't need to decrypt the messages. The PM send page could have a JS PGP encrypt function, if a user has set a keyid in their profile. It would be up to the receiver to decrypt the messages themselves. The hard part has already being done: http://www.hanewin.net/encrypt/ Title: Re: Automated PGP PMs in forum Post by: escrow.ms on May 30, 2013, 09:46:31 AM It can't be done without a browser addon unless you want the forum to have your private key. Forum can save public key and user needs to save private key in browser storage/file Here is a example: (Punbb.ru have done this on their forum) pics: http://prntscr.com/17dkem http://prntscr.com/17dki3 http://prntscr.com/17dko1 http://prntscr.com/17dl3e http://prntscr.com/17dl6j http://prntscr.com/17dl4u http://prntscr.com/17dl9t http://prntscr.com/17dljp But yeah it will take alot time to code this kind of system. Title: Re: Automated PGP PMs in forum Post by: 🏰 TradeFortress 🏰 on May 30, 2013, 10:29:47 AM It can't be done without a browser addon unless you want the forum to have your private key. Forum can save public key and user needs to save private key in browser storage/file Here is a example: (Punbb.ru have done this on their forum) pics: http://prntscr.com/17dkem http://prntscr.com/17dki3 http://prntscr.com/17dko1 http://prntscr.com/17dl3e http://prntscr.com/17dl6j http://prntscr.com/17dl4u http://prntscr.com/17dl9t http://prntscr.com/17dljp But yeah it will take alot time to code this kind of system. No, don't do this. People who use the GPG system can handle the decryption of themselves offline. Simply encrypting the message via JS is just ~3 lines of calling a premade library on the JS side, and a new DB column like the added Bitcoin addresses. Title: Re: Automated PGP PMs in forum Post by: escrow.ms on May 30, 2013, 10:37:14 AM No, don't do this. People who use the GPG system can handle the decryption of themselves offline. Simply encrypting the message via JS is just ~3 lines of calling a premade library on the JS side, and a new DB column like the added Bitcoin addresses. Then they can encrypt it themselves offline too, It takes less than 2 seconds to encrypt it using that site. what's the point of semi automatic pgp system. lazyness? >:( Title: Re: Automated PGP PMs in forum Post by: 🏰 TradeFortress 🏰 on May 30, 2013, 10:41:16 AM No, don't do this. People who use the GPG system can handle the decryption of themselves offline. Simply encrypting the message via JS is just ~3 lines of calling a premade library on the JS side, and a new DB column like the added Bitcoin addresses. Then they can encrypt it themselves offline too, It takes less than 2 seconds to encrypt it using that site. what's the point of semi automatic pgp system. lazyness? >:( Now, if you are using GPG, then it should be assumed that you have it installed and know how to decrypt. Title: Re: Automated PGP PMs in forum Post by: theymos on May 30, 2013, 03:14:02 PM The forum doesn't need to decrypt the messages. The PM send page could have a JS PGP encrypt function, if a user has set a keyid in their profile. It would be up to the receiver to decrypt the messages themselves. The hard part has already being done: http://www.hanewin.net/encrypt/ You still need a browser addon to prevent the forum from changing its JS to read your messages or steal your private key. Instead of integrating PGP into sites, the proper solution IMO is to improve PGP's browser (or OS) integration so that it can be easily used on all sites regardless of whether they know about PGP. Title: Re: Automated PGP PMs in forum Post by: justusranvier on May 30, 2013, 03:33:45 PM This would be cool but I'd be satisfied with the ability to upload a public key that the forum software would use to encrypt every email it sends me.
I'd like to be able reduce the amount of data mining my email provider can perform without giving up email entirely. Title: Re: Automated PGP PMs in forum Post by: chsados on May 30, 2013, 09:53:01 PM thanks for all the suggestions. ill do some further research.
maybe implementing privnote.com could be an answer - obviously not 100% secure but better than nothing. Title: Re: Automated PGP PMs in forum Post by: OpenYourEyes on May 30, 2013, 10:18:20 PM Not a solution to your actual issue, but why not use something like BitMessage? (https://www.bitmessage.org/)
A lot of people on here already have it, it's easy to install/setup for those that don't, and encrypts all the messages. Title: Re: Automated PGP PMs in forum Post by: chsados on May 31, 2013, 01:00:39 AM Not a solution to your actual issue, but why not use something like BitMessage? (https://www.bitmessage.org/) A lot of people on here already have it, it's easy to install/setup for those that don't, and encrypts all the messages. well bitmessage is a client and cannot be implemented into a forum website AFAIK |