The same way banks do "email money transfers": they email the recipient their pairing token. The logic being, if you can get into X's email, either you are X, or you're acting on their behalf. (And these types of services are used rarely-enough that if X has their email compromised, the sender will have already heard about it.)
> How are keys exchanged?
And this is why I said "pairing token" above--it seems like both clients have to be running at the same time for the transfer to progress, so presumably it's something like an ICE[1]-enabled TLS session between the two computers.
[1] http://en.wikipedia.org/wiki/Interactive_Connectivity_Establ...
I fear this page was written with a straight face :(
This isn't meant to be negative about this company, it really may be easy for everyone to use and lead to a success.
Although, making a list explicit like that is a creative lawyer challenge to look forward to - I'm not going to ask for something on that list, but I'll ask about something else...
I was actually doing some personal research work on the legality of warrant canaries but I've both started a new dayjob and the President announced some changes to NSLs involving gag orders so Ive put that on hiatus for the moment
I counted a mere 99 words (not including navigation) and every one of them tells. Concise and casual is a powerful combination.
I especially like the slogan/pitch:
Send Big Files Really Securely tells me exactly what the product does and makes me think it'll be easy and fun to use.
"You can just upload a file, email someone a link, and shut off your computer."
* should be "can not"
Why anyone would use closed-source "security" software today is beyond me.
That said I realize that they could've redone the app from scratch in past few months, so take the above for what it is - an impression from a beta.
https://github.com/abemassry/wsend-gpg
its a little different premise, but worth checking out
https://github.com/encrypt-to/encrypt.to
Another free service with PGP support.
[1] http://en.wikipedia.org/wiki/Traversal_Using_Relays_around_N...
Not that sure about level of security, but I have a harder time trusting proprietary software over OSS stuff.
With sharefest I could even run my own service if I wanted to, all the code is on Github.
Haven't sent a file yet but the download/signup flow was super easy - I was ready to send in about 20 seconds.
We have a "Friends of WireOver" group that we'll occasionally ask for feedback, advice, and new release testing. Email friends_at_wireover_dot_com to join.
Edit: Click gear icon, go to About tab and there is an uninstall button. Support was very quick to respond to me.
