The most privacy focused messaging app I know is SimpleX Chat, it has no user IDs, is FOSS, e2e encrypted with an option to use TOR, give it a try!
helloyanis
joined 1 year ago
@[email protected] Hey, I'm late but I may have found something you like! It's not for S/MIME but for OpenPGP keys, another method of email signing and encryption which does not require the certification by an authority (Actalis)
It's a website to list all OpenPGP public keys, and I know thunderbird (for desktop at least) automatically looks there whenever you write an email to an address to see if it has a public key.
As far as I understand, there are some advantages and disadvantages on OpenPGP, mainly :
- Actalis generates your private key, so if you follow the S/MIME tutorial they'll be able to decrypt your messages. With OpenPGP it's done locally on your computer so you don't need to send your private key to anyone.
- However, there is no way to easily revocate an OpenPGP key, so if yours leak, you can't just go on your Actalis dashboard and revocate it.
It's up to you to pick a method based on your needs!
Maybe because your community only allowed Mandarin? There can also be a community-wide scope that only allow certain languages, so if the community you post in mandarin-speaking only, that's why you might not have needed to select anything.
You're very welcome!
Yes, it's exactly that, I explained it in another reply
I also agree it should behave like that by default but I'm not really familiar with Lemmy's front-end codebase to be able to do this myself, so I do what I can!
If you regularly post in multiple languages, you have to select them all in your user settings.
However, having multiple languages selected will always display the same language list in the same order, even if you don't post in that language.
For example, I post mostly in french but sometimes in english as well. Well, the lemmy front-end always puts english at the start of the list so every time I post in french, I need to re-select it which is kind of annoying. This add-on does it for you!
Yes, it does!
As someone in Europe,
- I still have AI in paint (to create images), but I think it's opt-in
- I don't have Copilot, but I think it's integrated to Microsoft Edge (but you can uninstall it)
- I still have onedrive by default, but you can also uninstall it
- I don't have recall (or maybe I do but it's disabled, either way I can't open it)
- Microsoft still pushes you super hard to use an account
So here's what to expect if you manage to change your region. I have no idea on how to do that however.
I have put a link with more info about this if you don't want to use Actalis
Updated, thanks!
I don't think it's possible to do that, but I have no experience on this since I don't use my own email server so I could very well be wrong.
Heya, I found how you can digitally sign and encrypt emails! (It even gives them a cool icon for others to see!), and I haven't seen anything about it before so I thought I'd share how I did it!
Do you also want to send encrypted emails and sign them? Just follow these few steps!
But beforehand, let's define some terms :
-
Signed email : Email with a valid numerical signature. Anyone can read it and know it has not been modified since it was sent.
-
Encrypted email : Email encrypted with the recipient's public key. They can decrypt it with their private key
-
S/MIME certificate : A
.p12file containing your private key (So keep it for yourself and don't send it to anyone!!) and your public key.
Okay, now it's time to...
Start the setup (Obtain an S/MIME certificate)
- You'll need to ask to an authority for a certificate. Personally I use Actalis because they give free certificates for multiple email addresses, valid for a year (you need to redo the setup every year). If you don't want to use Actalis, more info is avilable here.
- Don't forget to put the website in english if you don't understand italian.
- Go on the page to request an S/MIME certificate, create an account and follow the setup. The verification email can take a little while (~2min)
- When the setup ends, you'll have a valid certificate in your dashboard (It can take a few minutes to appear if you just verified it) that you can download, and a password that Actalis emailed you to enable your certificate.
Install the certificate
- Download the .p12 file, then open it, type your password, and leave the default options to install the certificate on your device (Android or PC, on Android pick "For VPN and apps"). Don't delete your old one, so you can still decrypt old messages sent on the expired certificate
- Use an S/MIME compatible email client. On PC, there is Thunderbird, on Android, FairEmail.
- In your email client settings, importer the S/MIME certificate pofor signing AND encrypting your messages. It changes depending on your client, so here it is for Thunderbird :
- In the top-right menu, go to
Account settings,End-to-end encryption, underS/MIMEclick onManage S/MIME certificates,Importand pick your.p12file. Then, pickSelect a certificate, and pick yours from the tab "Your certificates".
- In the top-right menu, go to
An image is worth a thousand words (Sorry for the french)
Don't forget to check the box to sign and/or encrypt every message just below, if you want!
Communicate with someone
Once this is done, here is how you can communicate...
- ...While signing your messages :
It's easy, just click on "Sign" before sending. Usually, email clients show a small medal next to your name to show the email is signed.
- ...While encrypting your messages :
For that, you'll need your recipient's public key. They needs to send you a signed message (not encrypted, since you don't have each other's key at this point) where you can get their public key from their signature, and add it to your email client, which will allow you to encrypt messages you send to them. Then, send them a signed email (you can encrypt it) so they can get your public key and add it to their client, and then you'll be able to exchange encrypted emails!
I'm not an expert and probably made a few mistakes, if you spot any please tell me in the comments and I'll try to fix the guide!
view more: next โบ
I have no idea about this, but as of now anyone can register.
For reference, CSAM is Belgium's government portal and a system of login, as far as I know, so I assume it would be used to check if someone is a minor at the time of registration
Child safety is important but implementing this would kind of defeat the purpose of a privacy focused app.
I agree that just gatekeeping children and therefore verifying everyone with a government platform, but then it raises the question on how to improve child safety on an app that's self-hostable with not even user IDs to identify the users?
I don't have an answer to that, but I don't like just saying "This solution is bad", I always try to add "So try this instead, because XXX"