Facebook宣布将为其消息传递服务采用OpenPGP加密

近期Facebook宣布将为其消息传递服务采用OpenPGP加密，同时允许用户在他们的Facebook配置文件中张贴公钥。这些改进如何改善Facebook的安全性？其他服务和消息传递应用是否也该依法效之呢？

斯诺登事件增加的人们对网络隐私的担忧，几家大型互联网公司都开始加强其安全控制以保障其用户在线数据和通信安全以防被窥探。举例来说，现在最受欢迎的网站使用数字证书，从而让用户能够查看跨HTTPS的页面，HTTPS加密服务器和浏览器之间的流量。Facebook也使用了这种安全控制，也采用了HTTP严格传输安全机制，是浏览器只能在使用HTTPS连接Facebook。对于哪些想要额外隐私保护的用户，Facebook提供了一个在线Tor。（注意下，这个连接只能在开启Tor的浏览器上运行。）
http://tinyurl.com/prbf6kh http://tinyurl.com/qbgb7ku http://tinyurl.com/o8tr3jb http://tinyurl.com/pg6l2lu http://tinyurl.com/q2p34sy http://tinyurl.com/ngxmwq2 http://tinyurl.com/ohmrz49 http://tinyurl.com/p58tcoz http://tinyurl.com/o7da4al http://tinyurl.com/nqmjtu4 http://tinyurl.com/nu3pnhx http://tinyurl.com/pmdpdov http://tinyurl.com/qh9anlf http://tinyurl.com/nzhqofu http://tinyurl.com/pq932ea http://tinyurl.com/qx4eml2 http://tinyurl.com/ob8kqxx http://tinyurl.com/pb8v9qb http://tinyurl.com/p55bm7e http://tinyurl.com/ppodgrn http://tinyurl.com/pwjp4yf http://tinyurl.com/nux7wwt http://tinyurl.com/pma7n7r http://tinyurl.com/pdo9mo4 http://tinyurl.com/pao8o6o http://tinyurl.com/o2j5yw6 http://tinyurl.com/og9s9cn http://tinyurl.com/qztcde9 http://tinyurl.com/q7oz9fm http://tinyurl.com/pk5gesd http://tinyurl.com/pyv89lq http://tinyurl.com/pmha492 http://tinyurl.com/os2tmfy http://tinyurl.com/p3lrmvo http://tinyurl.com/pv384pp http://tinyurl.com/p7h5bl3 http://tinyurl.com/psvgtdb http://tinyurl.com/num458t http://tinyurl.com/oghjjj7 http://tinyurl.com/pxy8bft http://tinyurl.com/ouy7cvg http://tinyurl.com/o9ppmtj http://tinyurl.com/ou4p3fk http://tinyurl.com/q8oyjay http://tinyurl.com/nbn4xee http://tinyurl.com/o6wr5de http://tinyurl.com/pn9ox26 http://tinyurl.com/njdpaq5 http://tinyurl.com/obxetbw http://tinyurl.com/q75p899 http://tinyurl.com/pqf2xsp http://tinyurl.com/pcobqf8 http://tinyurl.com/n9nmrb6 http://tinyurl.com/oz9vbl7 http://tinyurl.com/qbtck3k http://tinyurl.com/no9motm http://tinyurl.com/nsc2rk9 http://tinyurl.com/p5lup78 http://tinyurl.com/puhf3jc http://tinyurl.com/nkarcn6 http://tinyurl.com/pp9565e http://tinyurl.com/pmg6lm9 http://tinyurl.com/opfu3db http://tinyurl.com/o9kfkkd http://tinyurl.com/njycrfo http://tinyurl.com/q2sdzld http://tinyurl.com/q4zwvvb http://tinyurl.com/odwjmxb http://tinyurl.com/njz676a http://tinyurl.com/p8ex3rc http://tinyurl.com/ox8tejr http://tinyurl.com/q2769hm http://tinyurl.com/puunppr http://tinyurl.com/p7pprnl http://tinyurl.com/pn72fe3 http://tinyurl.com/p26spob http://tinyurl.com/poulsoy http://tinyurl.com/oabbec7 http://tinyurl.com/pluku6l http://tinyurl.com/ntkl6vn http://tinyurl.com/oh6nyzw http://tinyurl.com/nhgwmbx
不过Facebook的加密部署间仍有些许空档，比如说，目前Facebook Messenger不提供端到端加密，虽然该公司使用TLS来保障安全连接到用户的电子邮件提供商，它发送给他们的个人电子邮件地址消息是明文的。这意味着尽管从Facebook服务器到用户带女子邮件服务器的消息是加密的，但是一旦传送，就可能被任何取得用户权限的人阅读。Facebook给用户发送各种邮件安全提醒通知，例如密码重置，都包含敏感信息，这需要更好的保护措施。

对于非技术人员，端到端加密是很难理解并使用的，因为它通常需要手动处理来交换发送方和接收方之间的公钥，在任意时间它们发送邮件或任何其他类型的消息。这已为电子邮件加密所广泛采用。
http://tinyurl.com/ost6o46 http://tinyurl.com/p554cgm http://tinyurl.com/q6pgj2r http://tinyurl.com/o3amot9 http://tinyurl.com/qyo92n4 http://tinyurl.com/nnmbllw http://tinyurl.com/pl43zqo http://tinyurl.com/o8mhcrb http://tinyurl.com/nn4m32c http://tinyurl.com/prepkdt http://tinyurl.com/ofx6eeg http://tinyurl.com/o2qx69m http://tinyurl.com/qdvfarv http://tinyurl.com/o4gjjjk http://tinyurl.com/nmujmy4 http://tinyurl.com/ndugqev http://tinyurl.com/oz8kjam http://tinyurl.com/p5rmduv http://tinyurl.com/qx92sow http://tinyurl.com/numzond http://tinyurl.com/p2dgkb2 http://tinyurl.com/oerepnq http://tinyurl.com/q393r9c http://tinyurl.com/opz4yju http://tinyurl.com/os4x5yr http://tinyurl.com/oqddoot http://tinyurl.com/otrjzbp http://tinyurl.com/ojawngt http://tinyurl.com/oztrsed http://tinyurl.com/q77w6fs http://tinyurl.com/nq2g3d6 http://tinyurl.com/qdxvmgd http://tinyurl.com/oz52sqz http://tinyurl.com/pf5ce2g http://tinyurl.com/pm6y3ze http://tinyurl.com/nhsuj6u http://tinyurl.com/ppk6u5a http://tinyurl.com/o2t3ac9 http://tinyurl.com/pacwng3 http://tinyurl.com/psra9nv http://tinyurl.com/q9efqkb http://tinyurl.com/paghex7 http://tinyurl.com/ockv5ja http://tinyurl.com/opgbmrs http://tinyurl.com/p2pt3lg http://tinyurl.com/nc6fqng http://tinyurl.com/qj2pva8 http://tinyurl.com/nhpcsmq http://tinyurl.com/peegkam http://tinyurl.com/onsdr6x http://tinyurl.com/p27ac5s http://tinyurl.com/ozdyfnr http://tinyurl.com/p966mto http://tinyurl.com/nhabro9 http://tinyurl.com/peavtqz http://tinyurl.com/pqp7zwk http://tinyurl.com/oz5wymj http://tinyurl.com/pbp2qbl http://tinyurl.com/p5uavjy http://tinyurl.com/nhyhyuw http://tinyurl.com/oqg29cw http://tinyurl.com/q94orvx http://tinyurl.com/q64ntdk http://tinyurl.com/nd9o3po http://tinyurl.com/p4oe3sn http://tinyurl.com/q9medhk http://tinyurl.com/pyhaoa2 http://tinyurl.com/qhd2ntb http://tinyurl.com/oncgkbf http://tinyurl.com/q5cvtpp http://tinyurl.com/nl7kanh http://tinyurl.com/p3f5y62 http://tinyurl.com/ngo2cue http://tinyurl.com/qyot4mf http://tinyurl.com/pxt8uo5 http://tinyurl.com/nusufde http://tinyurl.com/pdomewn http://tinyurl.com/qj7ca87 http://tinyurl.com/nm6eock http://tinyurl.com/pb28lxm http://tinyurl.com/o2u4vq4 http://tinyurl.com/omrwh9m http://tinyurl.com/opsxfr2 http://tinyurl.com/npzs67e http://tinyurl.com/ne6vl7j http://tinyurl.com/ou2nkqs http://tinyurl.com/ncgc7ul http://tinyurl.com/ngpromg http://tinyurl.com/owljo8p http://tinyurl.com/ptwge32 http://tinyurl.com/pep97ds http://tinyurl.com/okaspjr http://tinyurl.com/odfh5d2 http://tinyurl.com/njy3njy http://tinyurl.com/p7tuk73 http://tinyurl.com/oaybbq6 http://tinyurl.com/pdfrm6d http://tinyurl.com/oo66e96 http://tinyurl.com/qfnhwx8 http://tinyurl.com/no8hf3v http://tinyurl.com/p8kqdvu http://tinyurl.com/pcg42l9 http://tinyurl.com/qel5rry http://tinyurl.com/qy82ovt http://tinyurl.com/ouqjezm http://tinyurl.com/o4ez3us http://tinyurl.com/ocolbl8 http://tinyurl.com/nb7qsj7 http://tinyurl.com/phfj78u http://tinyurl.com/plpyoxp http://tinyurl.com/pktpxsq http://tinyurl.com/p8mzpnw http://tinyurl.com/o63c5fo http://tinyurl.com/q3xehxt http://tinyurl.com/qynwvqe http://tinyurl.com/qa2sz8t
http:/
4000
/tinyurl.com/obbm2tm
http://tinyurl.com/ofmfbw2
尽管如此，Facebook宣布其打算通过允许用户上传他们的OpenPGP公钥到他们的配置文件中来支持端到端电子邮件加密。这将允许任何人，包括Facebook通过使用基于PGP的加密来给用户发送加密的邮件。假如用户邮件账户被攻击或消息被拦截，Facebook使用带有用户公钥的加密邮件将呈不可读状态。Facebook也将为对外传至选择使用自己的OpenPGP公钥接收加密通知的用户的消息进行标记。

OpenPGP是一个已存在近20年的开源的端到端加密标准。虽然它使用数字证书，但并不依赖证书认证方来认证其公钥信息。相反，证书经由证书列表上其他支持公钥协会的用户签署。这种分散的信任模型被称作为信任网络。Facebook已选用一个广为使用并自由部署OpenPGP标准的GNU隐私保护（GPG）。该软件需要生成及管理一对儿PGP密钥，其中带有操作指南，可以从GPG网站上下载。
http://tinyurl.com/ocmedem http://tinyurl.com/n9m2v3v http://tinyurl.com/ncm3tlb http://tinyurl.com/o5r2q7u http://tinyurl.com/nfm4s5o http://tinyurl.com/ooffqhx http://tinyurl.com/nuy2bmw http://tinyurl.com/okup9dx http://tinyurl.com/pq2sx35 http://tinyurl.com/n9zz7jr http://tinyurl.com/ppxfstv http://tinyurl.com/nz9qacn http://tinyurl.com/qycv7qz http://tinyurl.com/nwsq7v6 http://tinyurl.com/ouocgc3 http://tinyurl.com/oyca76t http://tinyurl.com/oq7rzjx http://tinyurl.com/py93xg3 http://tinyurl.com/os9y3ea http://tinyurl.com/ocrofns http://tinyurl.com/p6ds7cu http://tinyurl.com/qhzws4s http://tinyurl.com/pbzke9o http://tinyurl.com/pbbzx8g http://tinyurl.com/qcla299 http://tinyurl.com/nukh9yl http://tinyurl.com/q72dx9w http://tinyurl.com/qagzqts http://tinyurl.com/obb7gf5 http://tinyurl.com/q69orq3 http://tinyurl.com/n98r8ug http://tinyurl.com/pdzuq9x http://tinyurl.com/pm4sqpn http://tinyurl.com/ornfbvm http://tinyurl.com/ows7zsg http://tinyurl.com/o7wn7gc http://tinyurl.com/ojwryjv http://tinyurl.com/o7zzcdt http://tinyurl.com/owe2nqx http://tinyurl.com/ndb7bl3 http://tinyurl.com/ov85t2m http://tinyurl.com/papw8ps http://tinyurl.com/oo274az http://tinyurl.com/nlcfqz6 http://tinyurl.com/oc23a6w http://tinyurl.com/nd7ml3w http://tinyurl.com/pww2q5v http://tinyurl.com/nlqklkm http://tinyurl.com/phosjgo http://tinyurl.com/pzpfbut http://tinyurl.com/q5g7gd6 http://tinyurl.com/o3as7e3 http://tinyurl.com/ov9v7ro http://tinyurl.com/pejhzn5 http://tinyurl.com/pzxncay http://tinyurl.com/p5jen3w http://tinyurl.com/pao6uxq http://tinyurl.com/plet5tu http://tinyurl.com/qzyxt3c http://tinyurl.com/nwq4na3 http://tinyurl.com/oo7h6jo http://tinyurl.com/q6mq78q http://tinyurl.com/obqudzv http://tinyurl.com/pffg5xd http://tinyurl.com/q6c62ne http://tinyurl.com/o824fdn http://tinyurl.com/qy7dsqk http://tinyurl.com/plcxbz2 http://tinyurl.com/nwg6eux http://tinyurl.com/pb2fuoe http://tinyurl.com/o9bjxl5 http://tinyurl.com/of4zgln http://tinyurl.com/nhn43a9 http://tinyurl.com/or9wdyf http://tinyurl.com/ohlm8bz http://tinyurl.com/oa53cy2 http://tinyurl.com/nwlgh66 http://tinyurl.com/nqx7bxm http://tinyurl.com/o9vxuwr http://tinyurl.com/pzh9f9s http://tinyurl.com/ouv7kmj http://tinyurl.com/o6dadsr http://tinyurl.com/ohp6vsm http://tinyurl.com/ovu2ybm http://tinyurl.com/omzfsb3 http://tinyurl.com/qf2hwk9 http://tinyurl.com/oqksvyn http://tinyurl.com/pn7xl85 http://tinyurl.com/q274fbo http://tinyurl.com/ofytwxk http://tinyurl.com/pl29cso http://tinyurl.com/q62f4y3 http://tinyurl.com/nn2ru4c http://tinyurl.com/p9cpnah http://tinyurl.com/nv7l2zj http://tinyurl.com/nno2683 http://tinyurl.com/pzp8274 http://tinyurl.com/qhyw5nh http://tinyurl.com/q6erkbh http://tinyurl.com/o4dxytz http://tinyurl.com/p3w5nkd http://tinyurl.com/oyr3vel http://tinyurl.com/oo3p6bs http://tinyurl.com/ph56cea
目前，Facebook新的OpenPGP加密功能只适用于台式机，尚未支持移动设备，不过通过促进其使用，Facebook可增加加密的使用来保护一些列在线服务的邮件内容安全。加密最好是无处不在且自动的，这也意味着不能从高敏感会话中区分出简单会话。
http://tinyurl.com/nd97n59 http://tinyurl.com/nj99k72 http://tinyurl.com/p3lzj2y http://tinyurl.com/oeq267a http://tinyurl.com/okq4393 http://tinyurl.com/nphonkl http://tinyurl.com/pcyousy http://tinyurl.com/nw6xtq5 http://tinyurl.com/ns75hjm http://tinyurl.com/pkva2u3 http://tinyurl.com/px55r8j http://tinyurl.com/pb9wv76 http://tinyurl.com/qc5k55g http://tinyurl.com/phfbuz5 http://tinyurl.com/qfav5w2 http://tinyurl.com/ngcbpp9 http://tinyurl.com/pyqwsqf http://tinyurl.com/qbfkh9n http://tinyurl.com/qyk7vzz http://tinyurl.com/nr3yyld http://tinyurl.com/oscq3m6 http://tinyurl.com/on8xtpc http://tinyurl.com/nzdzakj http://tinyurl.com/oudwlhg http://tinyurl.com/p2wtngq http://tinyurl.com/qfeftg6 http://tinyurl.com/nmnxrce http://tinyurl.com/oxkph9q http://tinyurl.com/o6krebj http://tinyurl.com/qd5aonk http://tinyurl.com/oful8k3 http://tinyurl.com/oxugfw4 http://tinyurl.com/pfuvpde http://tinyurl.com/nog8paf http://tinyurl.com/p6goyop
Facebook并不是唯一一家添加加密服务的公司。雅虎和谷歌的端到端带女子邮件加密扩展也是基于OpenPGP加密的，同时，Open Whisper Systems、Silent Circle以及苹果公司的iMessage都提供端到端加密。政府忧心该做法会限制其对抗恐怖主义威胁的能力，不过另一些人则认为这是一项保护隐私的技术。这是需要探讨的另外一个话题，不过我们能看到的是越来越多的供应商将加密纳入到其服务和消息传递应用程序当中去。