>The funniest part of this ongoing debate I see -- to me, at least -- is that the end result is, effectively, one of two options. Given the way we as a society

>The funniest part of this ongoing debate I see -- to me, at least -- is that the end result is, effectively, one of two options. Given the way we as a society use technology, today Speaking more generally, rather than specifically about CA chains, I respectfully disagree with you there. Imho, what usually happens in a sane world, is that we spend most of the time between these two extremes, in a pendulum as we balance one way, get burned, go back the other way, get burned again and repeat. Im fine with it being that way until someone releases a true ground breaker and redefines what we are balancing. >But honestly, my go-to strategy these days is mostly "whenever most technical people try to give security advice and speak on behalf of most users, almost always: do the exact opposite thing, in order to keep the users secure". I think I understand what you are saying, but that comes across as you cherry picking the bits of a technical persons advice that a layman wouldn't understand. The "exact opposite" is sorta hard to define.