[HacktionLab] "secure email list services"

[Garcon du Monde]

On Fri, May 04, 2012 at 12:51:36PM +0200, Martin wrote:
> In any case, if SELS is user friendly enough it would be the preferable choice 
> as it rules out one attack vector.

i haven't looked extensively at SELS but i would disagree fairly
strongly with this statement for the following reasons:

 1) it does not appear to have been maintained for >= 3 years

 2) if the server is not encrypting to recipients (i.e. individuals are
    encrypting to all the other individuals) then it would rely on
    people keeping their keyrings up to date as well as remembering to
    include everyone who is on the list - and i can easily imagine
    someone changing their key, or perhaps a new member being added (or
    removed!) without everyone realising and remembering to
    update. hence, it becomes very user UNfriendly.

having used schleuder2 in a number of different situations, i think it
is a good software that serves the purpose. i agree there are issues
with trusting the server, but it's slightly different when you run the
server ;-) but that is an issue that people have with almost all of the
tools that we discuss (e.g. good ol' plain boring email, web hosting,
etc)

solidarity,

	--gdm

> On Friday 04 May 2012, Alan Dawson wrote:
> > On Fri, May 04, 2012 at 10:01:45AM +0200, Martin wrote:
> > > Hi there,
> > > 
> > > I won't have time to prepare much, but perhaps somebody too is interested
> > > in
> > > 
> > > looking into:
> > >    http://sels.ncsa.illinois.edu/
> > 
> > http://schleuder2.nadir.org/
> > 
> > is another example of gpg mailing list software.
> > 
> > It would be interesting to compare them.
> > 
> > Regards,
> > 
> > Alan Dawson
> 
> Cheers,
> Martin
> 
> [1] Well, it could suppress messages, i.e., denial of service. But it cannot 
> compromise confidentiality.
> 
> _______________________________________________
> HacktionLab mailing list
> HacktionLab at lists.aktivix.org
> https://lists.aktivix.org/mailman/listinfo/hacktionlab

-- 
GPG: 5607 E4BC C6B6 90F4 5EBC  B348 D01B 9D77 912F 963C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.aktivix.org/mailman/private/hacktionlab/attachments/20120504/60dcafd1/attachment.pgp>