Facebook can now encrypt all email sent to you, for pretty good privacy.

[popman]

Check out these digits: 31A7 0953 D8D5 90BA 1FAB 3776 2F38 98CE DEE9 58CF

Facebook now offers the option to encrypt all email notifications sent to you with a public gpg key you set in your profile, and sign all of their emails to you with their public key.
These two steps should ensure that;

1. Nobody but you can read the notification emails facebook sends you.
2. You can verify any notification email as coming from facebook, against the current operation key they are using (which will in turn be signed by their primary key)

Adding your public key to your profile will also make it show up on your profile.

 

It's very important to us that the people who use Facebook feel safe and can trust that their connection to Facebook is secure; for instance this is why we run connections to our site over HTTPS with HSTS and why we provide a Tor onion site for people who want to enjoy security guarantees beyond those offered by HTTPS.
However these technologies protect only the direct connections people make to Facebook. People also receive information from us over channels such as email. Whilst Facebook seeks to secure connections to your email provider with TLS, the stored content of those messages may be accessible as plaintext (with attachments) to anyone who accesses your email provider or email account.
To enhance the privacy of this email content, today we are gradually rolling out an experimental new feature that enables people to add OpenPGP public keys to their profile; these keys can be used to "end-to-end" encrypt notification emails sent from Facebook to your preferred email accounts. People may also choose to share OpenPGP keys from their profile, with or without enabling encrypted notifications.

You will be able to update your own public key, using a desktop browser, at:
    https://www.facebook.com/me/about?section=contact-info

 

 

If all of this seems like gibberish to you, the EFF has a pretty good explanation of the technology here: https://ssd.eff.org/en/module/introduction-public-key-cryptography-and-pgp

It seems that facebook want to continue in their quest to have all of your data, but make sure nobody else has it. (unless they pay :^)

Source: https://www.facebook.com/notes/1611941762379302
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1

owF1VgtwVNUZToKvbENrqQ3FR+eIw2ua3c0mwG6SOk7eiSgEs7Ri1PbsvWf3Hvbu
PTf3nJvlgjJWY4PjWMBHx8JUbRAHRcQxIh0LClMQaKviCLZqKYw1UhWiFqLDY6D/
OXd32bQ0szPZe8/5//P93//939mV48eVlJV+++GWed8ER0ZK//x5omSB+eJVzQbR
0oi5AgmDcIJ0mqKC16PaSGMUVdfNqkUtsZZZqK66qRFF2hqbUG00OhvVtNXGUF2s
uRW1tLbWoVmx5rZAINBDM6k7DCHs+nCYhuDBdUIay4RvriZ1TQkvZFupnrDcEwi0
YY0kGEsji2URSyaJwyUAxGxBmYUEQ8TSHM8WCJsmIhlMTdgqaJJqWO7giBNLyH0e
c1GWCgNhZLsJk2ooZadQmnhqhROBqCW/Osh2WJKapAphS0ecpiyVmyXlwdTxD+Fj
UvoLubSQMhSIK5JEliEuiA0oDOaaOoDlrgPvDSwaAoFICM1lCaZ7KAG8ymwatpBD
sK5qLK4jf2oyzweUpXMZEwrUhNDCXGwfcWjSA+DeBaIR5ghoplYKJR2WKeSCQlOY
Wly1Fmmu40jKmE0cP1hyBCuQFqC7XMZPzxpUM6B4IAZoE65joQRRZBEdJbw8Iw7N
YMeTGWZA3xt1XQb7JBfIyjFZ4N3Pik3OUAanCaJCspdFro3Y2A6F/r+UauOpljiO
Fksp0NPrMkHu6BTTuCTKQzRjM0dgXx8uV21RHNiE2RKIIV8TVBBhkhATcZwkShqS
cOG4ijc/EErWmGURLS/OQiSVQgRqSQNKMgdJtrGlSSXACnyyhoeyBDmuVZRBiUzW
y6kAyQNm1BGPd3X7ouvojncrHLlYIKWP6gANxeEEZkkIKlAeWFRRNlcwsRYxz0dF
hYdSLnZghRAOnfSYJTXIoHg1dH5T1eGhQAfLEonFNwJBNMNiJktRiAQM8AzisUyl
AbAJRz4X15SDonpbRFEIdfkLqvMQRWgfNN8C9Blfh0q00CZFhGZgSAkTwV0QIihb
STyEfmrAmIjzxHNC0opHn/7/ZlfJyZ+OHH+Oz278pu4qVQEXTJYPcUKNRTLHS4Zw
jlNQcwZ7UvtY0+ANTcgKoEgTJkqQxQJGRZmOEFgzMpCBz5DnwoQyy++HH0j4BbGw
/BvYxVxLgLPIzhk58ciu0z6seT4umqMhjxYqYDpW6pCzm3Kw7oKXechhpilHUfo5
qJgshmGnEh0G+yRZEDoWeaOC4zBUVWicRK/raJ5NrK72rqJBVoTmB18NaENOI2pR
jktCGgiwCRsng4EFBQvCv8kFE7+Q5SkDV70vNPW8YxAQp2zPGJJ4QUuyN0pPmsFk
06QODElFHr1CppKPAV7li4D5YpAsKRIkZTmocOaYewa8aKG6DsC7pBoSPlOurWMY
QYWWZa0itqpyVoqRTnhaMBslHJblxAE7FvUBBH/S1zgYWzabDeXNWrlbhoRxAlDd
wH0pXy/7jTURlOMCRhf2nS4Q6Eyev7uUBZEMRyaFyUvRRAJ6zo0cmb7YW9vakAHy
xZJaIV2Bse1ClwIxseW3xb8Iz8+9hwwwiPoCWs71EEkmQ8xJhYkVzjDdNUkYpsGB
bwpu0GchCCwEFZkMlGkbXhDcLGinbMAtcliVAAuXXt66ZLnUcom6e1Tfel3C1ZKB
+0i+ZsU68I+r1AWrHEfdv5Z/64J9EFUuFSE03bVA5Ny/6WzQTf2d8s7qhhxaUXX/
0wtQAeHhyOxIpG5mJDq7pjZaV1tdE3ig7OqLSkrLSi65uEz+fCoJlF+e/001eeZ3
zi1Zs/Ivj28c7V2cTD+bPH6CHTl8t/XpvXOenV/2zUtXL1s7da6xrXLnqHHF1/P+
ldm8o3pg5Pq3b1n44MTggUUffNV005ovHts7/NQL9x178qNHfrH1haEjS89uuvyL
U/qQMXXiuhVzl76/9svB1nd73nzq+yefmTTxTJqvov2bn7uq/OV7FuzZYTUcWzX5
gbP7+fbPSUUmXH64srRnzoSnD/x6aEiLLY8sbx/9YPTaLacH5hwdeuOW5zt3fZj6
+sCDHaUVW1Z9/N1V5Us+2nlprOfnS1PrywcGFp97hrdHX981/DFbdij2t070xPLf
/jX7s/6DFYv2773m+JWD6c7HBrefHD4S++Otv1rWNe79dxpH26sfLx148/YbdvcO
v9UQ+cn81+IN9/59/r4V8Z1d66r2nLjr0W+9uGNj24+3hN++nUwZid7z77s/ib6z
7+RL0zb0Hbiu8vVjIv27+2sum3CYV3csOd2w+tyPTg9Or5hZX7lpypw2fcorFZnf
LJu3evvKQ+HRwyseGnji5emvvnen+YdtqyfsWHtX+4w+un9N6+7Z65+cv/7GyoOT
PhshmZsv+oF1aMEvB49/1t+/nGyaqfXe1lW74Yx56tS0PzW92z/uwxXj/9Gz4Xvk
tYcCV3751TW7m7vHb9w3PPLp1JZd0V3Vt01t3muKDvTemTceLrt423Ox0vu2jiys
P7vz2k/Grxl+64p1/3zkRNfv1046eqO7+SC65OirWy/b8+j6H/4H
=mfqb
-----END PGP MESSAGE-----

[bcredeur97]

yeah cause facebook always cared about your security.

[popman]

Signing forum posts here is not even kind of easy.

[NeatSquidYT]

Signing forum posts here is not even kind of easy.

?

[thekeemo]

they just read it and make a copy of it first

[popman]

?

That big jumble of ASCII at the end of the post is

Everything above it (in raw bbcode) signed with my private key.

[FakezZ]

yeah cause facebook always cared about your security.

They probably want your data protected from others. They surely want it and they can still get it with this type of encryption (if I'm right), but will restrict "competitors" from accessing it, while making users feel safer. Win Win Win

[Guest]

It's like a racketeer boasting about how he has installed new locks in a shop he extorts so that it doesn't get burglarized.

[Me1z]

"CAN"

The ability to do something does not guarantee it will happen, nor that it is entirely benign in its functionality.