Comment by kfrzcode
4 years ago
> It’s portable because: decrypting these secrets does not require special software! All you need is a browser.
No complex, million+ SLOC codebases to install, except the one browser. I'll stick with gpg signing my pass repo and call it a day.
To be clear: I use gpg too.
But I can't expect my mom or girlfriend to learn how to use it.
With PortableSecret I can communicate privately with them, without installing or learning anything new.
So explain to us the workflow of sharing data to them
Problem: Send a file securely
Solution: Encrypt file using PortableSecret, send file over unencrypted email.
Problem: Send the decryption pasword
Solution: I can't use unencrypted email to send secrets. Let me use end-to-end encrypted Signal for that
---
What problem did you solve, that didn't complicate the process of just sending the file with Signal to begin with?
> Problem: Send the decryption pasword
I can choose a password such as 'The name of uncle Robert's favorite movie' (i.e. something that it's easy for her, but hard for everyone else).
OR
I can call her, and say: 'Just sent you a password-protected file. The password is 'Foobar'
OR
I can include the password in the email itself (doesn't protect from an attacker but protects from mail provider snooping/indexing emails).
It doesn't make my communications NSA proof. It adds a little bit of privacy. For the specific use-case, it's more than enough.