The encryption thread

[yod]

really? have you asked all the laymen?

[imdying]

As the others have alluded to, I'm not sure what the relevance of md5 was to the original discussion.

Bottom line is, even if PMs were encrypted in the database, anyone with server access would find it a trivial matter to decrypt and read them. Well, anyone with half a brain, which presumably, given they have that sort of access, they do.

[limbimtimwim]

If you wanted to keep a PM very private you could just share public keys and PGP* it. You could even put your public key in your signature.

But you may as well just start a new thread, since that is just as safe.

Or just meet the person face to face in the middle of a the ocean in dinghy. That's my preference. Nothing like a clandestine dinghy rendezvous.

*Or some other public key encryption system.

[phaedrus]

the problem with using pgp, gpg etc.. is getting other people to use it. Especially when things 'just work' without the extra hassle. It's bad enough getting people to send stuff in formats you can read reliably.