4 ms·
for S/MIME you don't need this; it's just a CA chain like HTTPS (for better or worse). For PGP I mentioned some possible options: > PGP could also be used; we
by Carpetsmoker 8y ago
for S/MIME you don't need this; it's just a CA chain like HTTPS (for better or worse).
For PGP I mentioned some possible options:
> PGP could also be used; we can bypass much of the key exchange dilemma by just shipping email clients with keys for large organisations (PayPal, Google, etc.); like browsers do with some certificates. Or publish the keys on a DNS record. Even just publishing them on your website (or, if you’re a bank, in local branches etc.) so people can manually add them to their keyrings is a lot better than not signing anything at all!