[liberationtech] Announcing Scramble.io

[Feross Aboukhadijeh]

> Sounds very cool yes. But where is the OpenPGP.js stored?

scramble webmail: it's stored on the server and transmitted over https.
scramble extension: stored locally, never/rarely updated, like tor browser
bundle.

See: https://scramble.io/doc/#explanation

I'm sure DC can elaborate more.

Feross
feross.org - peercdn.com (make your site faster & reduce your bandwidth
costs!)


On Fri, Aug 23, 2013 at 5:36 AM, Jerzy Łogiewa <jerzyma at interia.eu> wrote:

> Sounds very cool yes. But where is the OpenPGP.js stored?
>
> --
> Jerzy Łogiewa -- jerzyma at interia.eu
>
> On Aug 23, 2013, at 2:28 PM, Feross Aboukhadijeh wrote:
>
> > Even if you're *not* using the chrome extension version (i.e. "paranoid
> mode"), it's impossible for a central adversary who controls the Scramble
> servers to do a targeted attack against you specifically, because the
> browser downloads all the javascript upfront and only requests
> user-specific mailbox data afterwards. It doesn't download any new code
> after it's identified you to the server. Again, mad cool.
>
> --
> Liberationtech is a public list whose archives are searchable on Google.
> Violations of list guidelines will get you moderated:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech.
> Unsubscribe, change to digest, or change password by emailing moderator at
> companys at stanford.edu.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20130823/d332e25b/attachment.html>