"Mom, I don't get the point of your FIPS Mail. GPG encrypts email just fine."
True. GPG encrypts what you say.
FIPS Mail secures that you said it — and to whom.
No central mail server. No single com...
FIPS is very interesting but I was looking at that and find this on their website : https://learn.fips.network/lessons/11-threat-model
- **No anonymity**. Direct peers learn each other's npub through the FMP Noise IK handshake. There is no mixing layer, no cover traffic, no tunnel rotation. Tor and I2P solve a different problem.
- **No traffic analysis resistance**. A global observer with vantage points on multiple transports can correlate flow timing and size patterns across the mesh to infer who is talking to whom. FIPS does not pad, mix, or batch to defeat this. Confidentiality is protected; the fact that a conversation is happening is not.
- **No anonymity**. Direct peers learn each other's npub through the FMP Noise IK handshake. There is no mixing layer, no cover traffic, no tunnel rotation. Tor and I2P solve a different problem.
- **No traffic analysis resistance**. A global observer with vantage points on multiple transports can correlate flow timing and size patterns across the mesh to infer who is talking to whom. FIPS does not pad, mix, or batch to defeat this. Confidentiality is protected; the fact that a conversation is happening is not.