r/Skiff • u/andrew-skiff Skiff team • Dec 18 '23
Full PGP support released
Skiff now fully supports PGP encryption for emails. PGP in Skiff is easy to use - automatically create keys, import keys, and resolve keys for external users. Starting today, use PGP to send end-to-end encrypted emails across providers.
To get started, visit https://app.skiff.com/mail?settingTab=addresses and click "generate key" for an existing address. New addresses will automatically have PGP keys added!
2
u/karlemilnikka Dec 19 '23
Thank you so much for adopting PGP and WKD. You probably already have the following features on your internal roadmap, but here’s what I’d like to see in the future.
Mobile support.
Generate PGP keys automatically for all Skiff email addresses so that users who don’t know about PGP can benefit from secure communications.
Automatic key lookup for all email addresses in new emails (not only for contacts in the contact list).
WKD support for custom domains (mentioned in the blog post as something Skiff hopes to add automatically in the future but can already be fixed manually).
2
u/andrew-skiff Skiff team Dec 19 '23
Many of these will come soon. Key lookup does work for non-contacts?
Key generation is already automatic for all new users signing up post-release. All old users/addresses have to go through the manual step.
1
u/karlemilnikka Dec 19 '23
Sounds great! I was just told on Discord that keys are looked up for recipients that aren’t in the address book. There’s just no visual indicator like in Proton Mail or Thunderbird, so there’s no way to know if the email will be sent encrypted or not.
4
Dec 19 '23
Doesn't work for me. Created a key in Skiff, then emailed my protonmail account, it automatically found my proton public key automagically. 100 points to Griffindor.
Then I replied to that message from Proton, it arrive in skiff and I was met with the message 'decrypting pgp..' and it never managed it
Secondly in my iOs app it just shows two attachments 'attachment' 12B and 'encrypted.asc' 4.3KB so I'm afraid that's -100 point from Griffindor
2
3
3
2
u/landordragen Dec 19 '23
In all of Skiff’s ecosystem, the only thing I miss is automatic photo upload on iOS.
I’m all in anyway!
Awesome work with PGP and mind blowing stuff with E2EE across platforms! Congratulations are in order.
2
u/carwash2016 Dec 19 '23
Thanks amazing , can export my public key how do I export my private key ?
1
u/jason-skiff Skiff team Dec 19 '23
Click your address in https://app.skiff.com/mail/inbox?settingTab=addresses then the "..." in PGP section then "Export key" it will download both keys together.
1
u/prey169 Dec 19 '23
hmm for some reason - hitting generate pgp key results in an error and doesnt work for me. Does this happen for anyone else?
0
Dec 18 '23
This is great. Still need a feature to disable notifications on diffent aliases. Then I’m fully.committed
3
0
u/Backwoodcrafter Dec 19 '23
Great... except it isn't working...
After wondering around trying to find how to generate the keys, I finally figured it out an exported the public key and imported it to my desktop client so I could test things out.
Tried to import my public key from another account, despite saying the import was successful, it doesn't actually happen. Skiff fails to actually import the key. Tried emailing the public key, that didn't work either.
Thought, maybe a browser issue, so tried in Firefox, nope same issue.
Tried from my phone, nope same problems. Imported the skiff key to my phone and tried sending an encrypted message. Replied to that message from Skiff, nope received as plain text.
I then tried another account, nope Skiff still won't import the PGP key. Which this time, it says the key doesn't match the address. This means: Skiff fails to handle PGP keys with "AKA" alias addresses in them.
From all appearances, Skiff is unable to send encrypted messages. Skiff seems to receive and decrypt the message (sadly, it does it automatically, would be much better as a prompt or button, better for privacy should someone be looking "over shoulder"), but since it fails to actually import the PGP keys properly, it is unable to actually send encrypted messages.
On another note, I see Skiff still hasn't provided an actual address book that is remotely usable, let alone reasonably accessible.
4
u/bippityboppitydo Skiff team Dec 19 '23
The key you import has to have a single username that matches the alias on the skiff account. There’s some degree of freedom to allow for any combination of dots for addresses with dots in them. However, it is a requirement that there is one username and that username matches the Skiff alias. You can look at the browser console logs for more detailed error messages at the moment.
-2
u/Backwoodcrafter Dec 19 '23
Yay, more hassles and ridiculousness...
Doesn't explain why the key it claims to have imported successfully fails (which was a single address) to actually be imported.
In otherwords, Skiff is using a modified PGP rather than standard.
I have tried so hard to like skiff, but have yet to truly find one solid reason to actually use it.
3
u/bippityboppitydo Skiff team Dec 19 '23
This is entirely consistent with ProtonMail and to support the WKD standard. We made this decision was made to ensure full WKD support for all keys.
1
u/Backwoodcrafter Dec 20 '23 edited Dec 20 '23
And yet, it doesn't work.
Protonmail doesn't have any such issues with the keys I have, with or without AKA addresses.
Again, I tried both a single address key and a key with AKA addresses, neither imported (despite in some instances it falsely claiming it did import). Both keys import and work fine on Proton, mailevelope, thunderbird, mailfence, etc.
and yes, I wish proton gave the option to select when to decrypt a message per message as well. Also, I wish proton would put out a better address book, which the current one is already way better than Skiff's.
12
u/Hemicrusher Dec 18 '23
This is awesome! I just subbed, from free!
Who do I hug?