[Mailsec] (no subject)

[Steffen Nurpmeso <[e-mail]>]

Subject: Re: [OFFLIST] Re: [Mailsec] [Extra] Advanced ("Modern & Secure") Email Authentication
# Removing or modifying In-Reply-To: breaks the old, and starts a new thread.
# Assigning hyphen-minus - creates a thread of only the replied-to message
In-Reply-To: <[e-mail]>

Michael Peddemors wrote in
 <[e-mail]>:
 ...

I apologise to have addressed you -- it rather should have been
sent primarily to the original poster.

And in general it was possibly a bit over-reacted.
But ..hm.. not that much.  I already read mails from
administrators stating to me "i now use X" when setting free my
mail account, and i understood that Signal.

It is just that i personally get angry when even better security
is spoken ill of, whereas people sit in front of browser code
bases of dozens of millions lines of code, with enabled
Javascript, and logging into accounts via HTTPS and Cookies that
have been set months ago.  I at least use two totally separated
browser sandboxes for normal browsing (everything but x) and
"secure" browsing (everything with an account, etc, where that
profile directory is an encrypted directory).  But i think this is
not normal, i think the default is people using one browser
instance for anything.  Of course, this is nothing the IETF can
improve.  Since JMAP was the starter of this thread, i guess the
time where "anything is an object accessible via an omnipotent
protocol that is spoken also by browsers" is not that far off.  In
sofar clamping client possibilities now that the protocol is
omnipotent is the right way to go.  Nothing the IETF can do about
(no?).  An interesting topic for user interface providers,
configuring firefox just to turn off all the things is an
experience, what if i would have a smartphone with dozens of apps,
and my service provider would present me with a long list of
switches to configure access of that app when i use it the first
time to contact service provider a, b, c?  Wow!  (In fact
i _cannot_ configure firefox right, it is just too messy.  Someone
pointed me to the uMatrix Plug-In, and i use it, it really helps
-- it is the only plugin i have.  One would not think _how_ messy
even the simplemost web pages are, and from _how many_ different
providers they slurp in scripts, graphics, and whatever else.  It
is just a huge pile of crap!  _How can this be secure??_  And
scripting everywhere, and "most modern" other things, where the
results could have been implemented pre-Y2K with the CSS available
by then.  Etc. etc.)

Again apologies for addressing you as the primary receiver!

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)