Show HN: Easy Email Encryption inside Gmail (Alpha, Open-Source)
Seems like it would be better to go with S/MIME or OpenPGP for this.  S/MIME would potentially be able to re-use some of the browser's own code for handling certs.<p>Symmetric crypto (like this) is relatively easy to implement, but a usability nightmare.<p>A browser extension is still a lot better than a general webapp for security.<p>I wish someone issued "mail-from" auth personal certs for ~free to end users, integrated into apps for cert request/signing/etc.  StartCom's StartSSL sort of does (for "level 1" personal certs), but their cert issuance UI is a huge pain.  It really needs to work with the "I have no cert, I'm going to use an app for a specific purpose, I get a cert incidental to signing up for the service, I then can use the cert for other purposes", which none of the x509 crowd really support.<p>WoT on the certs would be cool too (which startcom is trying, but since it's a pain to use, there aren't enough people, so it doesn't work.)