1

(3 replies, posted in Requests)

the_glu wrote:

I don't understand what you want

Iran has 100% monitoring of outbound traffic. 

The auto update request to a known FireGPG IP allows the gov't very easily to track FireGPG users in the country, even if they got their copy from a USB drive.

This is a potentially dangerous behavior.

Does auto update check when FireGPG is first installed, before the user can turn it off?

Will Firefox's own update mechanism directly access a FireGPG specific IP anyway?

I've been checking out FireGPG.

By default, automatic updates were enabled.

For the parts of the world where FireGPG is most needed (especially this week), this is a big red flag to use of (illegal) encryption software.

Obviously running old crypto software can be a vulnerability too, but I don't even know if auto updates fetch the moment I installed.

Is this just a Beta thing?  Is Beta FireGPG secure enough for real world secure uses?

Nice work on FireGPG.  Having hours examining alternatives, I say it is desperately needed.