3 ms·
The site does not use HTTPS (TLS) so that public key is completely useless.
by vasilakisfil 10y ago
The site does not use HTTPS (TLS) so that public key is completely useless.
- jwilk 10y agoWhat is your threat model? Is a TLA going to MITM all connections to incoherency.co.uk in order to read OpenGPG-encrypted mails? That's not very realistic. I'm not saying that the way the key is being distributed is perfect, but I wouldn't say it's "completely useless".