[liberationtech] pgp message encryption and decrypion using just a browser

[David Dahl]

Thanks. I am hoping to round up a bunch of web devs who want to build
communications tools with this extension. That above all will help
uncover bugs, weaknesses and hopefully show people we can have privacy
and easy communication.

On Wed, Feb 9, 2011 at 3:18 AM, Frank Corrigan
<email at franciscorrigan.com> wrote:
> Thanks for this and your efforts and especially for integration into a
> Fire Fox extension.
>
> It's a shame FireGPG <http://getfiregpg.org> has been discontinued, it
> also made use of encryption usable through integration with a familiar
> browser.
>
> Frank
>
>
> ----- Original message -----
> From: "David Dahl" <david at ddahl.com>
> To: "Danny O'Brien" <DObrien at cpj.org>
> Cc: liberationtech at lists.stanford.edu
> Date: Tue, 8 Feb 2011 17:48:52 -0600
> Subject: Re: [liberationtech] pgp message encryption and decrypion using
> just a browser
>
> I have been wanting to follow up on this thread, which means writing
> some code.:)
>
> I have distilled the 3 methods needed to construct any kind of
> PGP-like web application. My new extension, DOMCrypt, attaches a
> 'crypt' property to each web page giving Javascript developers
> crypt.generateKeyPair(), crypt.encrypt() and crypt.decrypt().
>
> All of the underlying crypto code is handled by NSS - the same library
> used for the SSL/HTTPS. This is not a 'native JS' solution. It is fast
> C code under the hood.
>
> See http://mozilla.ddahl.com/domcrypt/demo.html for a demo, the code
> is here: https://github.com/daviddahl/domcrypt
>
> Regards,
>
> David
>
> On Sun, Sep 26, 2010 at 6:21 AM, David Dahl <david at ddahl.com> wrote:
>> I have been experimenting with the JavaScript API for PKI that is
>> provided by Firefox Sync. The underlying bits are implemented in C++
>> (NSS), so it is pretty fast. I am slowly building up a toolkit for
>> messaging in a pseudo-anonymous fashion called "Droplettr" and am
>> looking for contributors. The entire thing is open source and is
>> designed to be  used like a protocol instead of a walled garden.
>>
>> Repo: http://bitbucket.org/daviddahl/droplettr/
>>
>> Site: https://droplettr.com/
>>
>> Things are in a state of brokenness at the moment, as this is a side
>> research project of mine.
>>
>> Regards,
>>
>> David
>>
>> On Sat, Sep 25, 2010 at 12:00 AM, Danny O'Brien <DObrien at cpj.org> wrote:
>>> This really isn't what you want Frank (at all!), but its bizarreness plus tangential connection to your question was too good to miss:
>>>
>>> http://www.links.org/?p=993
>>>
>>> It's TLS (including client-side certificates), re-implemented in in-browser Javascript. Ben's point is that such an implementation allows greater experimentation with security UI, which I think everyone agrees is the current Hard Problem.
>>>
>>> d.
>>>
>>> On Sep 23, 2010, at 11:08 PM, Frank Corrigan wrote:
>>>
>>>> For some time I have been investigating the availability of web pages
>>>> that provide easy to use password creation and message encryption
>>>> functions, which only depend upon web browsers inbuilt javascript
>>>> capabilities and can therefore be downloaded and used off line. And
>>>> works across all common OSs and browsers.
>>>>
>>>> Examples are
>>>> https://www.pwdhash.com
>>>> as one of many options for password creation
>>>>
>>>> and http://www.hanewin.net/encrypt/PGcrypt.htm
>>>> to encrypt messages using a recipients pgp Public key.
>>>>
>>>> The help I am requesting is whether anyone knows of an online resource,
>>>> that meets the above criteria, that can not only encrypt text using a
>>>> pgp Public key but also has a facility to decrypt a pgp message with the
>>>> recipients Private key?
>>>>
>>>> I am aware of FireGPG:
>>>> http://getfiregpg.org/s/home
>>>>
>>>> which is excellent, though sadly now discontinued, but it is tied to
>>>> Fire Fox through an add-on and it's functions are dependent upon a local
>>>> install of GPG.
>>>>
>>>> Thanks
>>>> Frank
>>>> _______________________________________________
>>>> liberationtech mailing list
>>>> liberationtech at lists.stanford.edu
>>>>
>>>> Should you need to change your subscription options, please go to:
>>>>
>>>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>>
>>> _______________________________________________
>>> liberationtech mailing list
>>> liberationtech at lists.stanford.edu
>>>
>>> Should you need to change your subscription options, please go to:
>>>
>>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>>
>>
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
>
> Should you need to change your subscription options, please go to:
>
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
> If you would like to receive a daily digest, click "yes" (once you click
> above) next to "would you like to receive list mail batched in a daily
> digest?"
>
> You will need the user name and password you receive from the list
> moderator in monthly reminders.
>
> Should you need immediate assistance, please contact the list moderator.
>
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech
>
>