Google、Chromeで使えるメールの暗号化ツールを公開
http://yro.slashdot.jp/story/14/06/05/060203/
https://code.google.com/p/end-to-end/
Are the private key(s) kept in memory, are they always purged after every operation, or is there a passphrase cache?
The private keys are kept in memory unencrypted. We recommend making sure your keyring has a passphrase so that private keys are stored encrypted in localStorage.
素敵〜
How safe are private keys in memory?
In memory, the private key is sandboxed by Chrome from other things. When private keys are in localStorage they’re not protected by Chrome’s sandbox, which is why we encrypt them there.
Please note that enabling Chrome’s "Automatically send usage statistics and crash reports to Google" means that, in the event of a crash, parts of memory containing private key material might be sent to Google.
素敵過ぎる。
