4 ms·

I'm doing no such thing. I have issued rebuttals and new arguments, not just new arguments and a tactical ignoring of the counterarguments. If you can't address

I'm doing no such thing. I have issued rebuttals and new arguments, not just new arguments and a tactical ignoring of the counterarguments. If you can't address my points then don't. Don't acuse me of arguing in bad faith. You can knock that off, thank you very much.

tialaramex 8y ago
Thing you didn't provide: 1. Any citation whatsoever for your claim that "Certificate authorities are regularly compromised" 2. Any citation whatsoever for your claim that "PGP keys are much more secure" 3. The list of those maintainers and their countries you're actually trusting for some reason with your current stance even though you're supposedly worried about "sketchy countries". Yes, a list, I know, you don't have one. Which is illustrative that in fact this "sketchy countries" concern was pure invention and you don't actually care. 4. The measures Alpine puts in place to protect these keys. Again in reality there aren't any, and in reality you don't care, because your concerns are bullshit. In the technical sense. 5. The public forum where I, as a third party, can see that this is all above board and not, as is the reality, just nobody cares and it's all assumed to be fine. For reference for the Web PKI this forum is operated by Mozilla, mozilla.dev.security.policy Things you did provide: 1. A big list of non-threats like on-path governments somehow tampering with HTTPS. That's a Gish Gallop. You don't engage with the existing debate, you just keep spewing more "new arguments" of no value, in the hope people will accept you're right.
- Sir_Cmpwn 8y ago
  I can't provide what I'm not asked for. 1, 2: I didn't cite explanations for these because I explained them directly. 3: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-keys?h=master https://git.alpinelinux.org/cgit/aports/tree/main/alpine-key... 4: I don't know the particular steps ncopa et al take to safeguard their private keys, but that doesn't mean that my concerns are technical bullshit. 5: You're looking for alpine-devel, a public mailing list. I'm not going to entertain further discussion with you if you aren't going to be civil. Ask questions and I will ask them. Acuse me of bad faith and call my concerns bullshit and I won't.
  - tialaramex 8y ago
    I didn't ask you for "explanation" I asked you for citations supporting such extraordinary (indeed I'd go so far as to say ridiculous) claims. You still haven't done so and I think it's entirely reasonable to conclude that this is because you cannot. Not technical bullshit, bullshit in the technical sense. "Bullshit" is a technical term that's distinct from a lie. Lies are told on the understanding that they're a falsehood, with the intent to deceive, but bullshit isn't interested in the veracity of the claim at all, it serves only a rhetorical purpose.

tialaramex 8y ago

Thing you didn't provide: 1. Any citation whatsoever for your claim that "Certificate authorities are regularly compromised" 2. Any citation whatsoever for your claim that "PGP keys are much more secure" 3. The list of those maintainers and their countries you're actually trusting for some reason with your current stance even though you're supposedly worried about "sketchy countries". Yes, a list, I know, you don't have one. Which is illustrative that in fact this "sketchy countries" concern was pure invention and you don't actually care. 4. The measures Alpine puts in place to protect these keys. Again in reality there aren't any, and in reality you don't care, because your concerns are bullshit. In the technical sense. 5. The public forum where I, as a third party, can see that this is all above board and not, as is the reality, just nobody cares and it's all assumed to be fine. For reference for the Web PKI this forum is operated by Mozilla, mozilla.dev.security.policy Things you did provide: 1. A big list of non-threats like on-path governments somehow tampering with HTTPS. That's a Gish Gallop. You don't engage with the existing debate, you just keep spewing more "new arguments" of no value, in the hope people will accept you're right.

Sir_Cmpwn 8y ago
I can't provide what I'm not asked for. 1, 2: I didn't cite explanations for these because I explained them directly. 3: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-keys?h=master https://git.alpinelinux.org/cgit/aports/tree/main/alpine-key... 4: I don't know the particular steps ncopa et al take to safeguard their private keys, but that doesn't mean that my concerns are technical bullshit. 5: You're looking for alpine-devel, a public mailing list. I'm not going to entertain further discussion with you if you aren't going to be civil. Ask questions and I will ask them. Acuse me of bad faith and call my concerns bullshit and I won't.
- tialaramex 8y ago
  I didn't ask you for "explanation" I asked you for citations supporting such extraordinary (indeed I'd go so far as to say ridiculous) claims. You still haven't done so and I think it's entirely reasonable to conclude that this is because you cannot. Not technical bullshit, bullshit in the technical sense. "Bullshit" is a technical term that's distinct from a lie. Lies are told on the understanding that they're a falsehood, with the intent to deceive, but bullshit isn't interested in the veracity of the claim at all, it serves only a rhetorical purpose.