@miles You are starting to creep me out...
—
My name is miles. I also do the hole dashes-to-seperate-ideas thing and you are the only other person I have seen use it. Also a big fan of the EFF... and use signal... and have my GPG key signature in my profile...
—
You dont... live in texas do you? No long lost children? No clones?
—
Seriously, Its uncanny. Abstract profile pic and everything...
@NthTensor all similarities addressed, though, your threat model seems very different from mine.
—
For example: you use Google services, I do not use Google services.
@miles You are correct, though I have been taking strides to distance myself; Moving more of my life out of google and similar.
—
Suffice to say and I am required to use google currently, and that I, for far to long, allowed connivence to take president over security. The process of untangling one's self is a long one.
@NthTensor I was in your situation. My current comm stack:
• ProtonMail for email
• personal ownCloud server for calendar/contacts/notes/reminders
• CopperheadOS android for mobile
• Firefox for browser
• Qubes for primary OS (soon)
• Signal for messaging, Ricochet when required. Silence also an option. SMS no-no.
(no security through obscurity — this information is safe being public)
@NthTensor I am on keybase: https://keybase.io/rmrm
@NthTensor as for tox, never heard of it. I prefer Signal because it has lots of institutional backing, is peer reviewed, and is (relatively) popular. That, and Axolotl is very cool.
@miles Tox is not centralized. https://github.com/irungentoo/toxcore.
@NthTensor looks interesting. But AFAIK from looking at the high level crypto overview, there is no forward secrecy or deniability... please correct me if I'm wrong.
@miles They definitely have forward forward security implemented. I do not think that tox has deniability, but dont quote me on that.
—
This issue might help clarify a tad. https://github.com/irungentoo/toxcore/issues/1254
@NthTensor accidentally omitted the following:
• ProtonVPN for VPN
• Keybase for secondary auth
• Authy/other OTP solutions wherever supported
• Tor when speed is not required
• FDE (ofc)
@miles Ever looked into tox? I prefer it to signal, personally.
—
Thank you for the run down. I was about to ask for email suggestions. Some new ones I had not seen before. Thanks once more.
—
You dont appear to be useing key base. While I have the opportunity, I might as well ask; any specific reason?