3 ms·
Cryptographic signatures would solve this if implemented correctly, but I know zero people that utilise it and I work in infosec.
by Bnshsysjab 7y ago
Cryptographic signatures would solve this if implemented correctly, but I know zero people that utilise it and I work in infosec.
- sowbug 7y agoAnd even if they did, people (being human) would still fall for fake change-of-public-key announcements.
- Bnshsysjab 7y agoOnly if the behaviour reflects current functions. I imagine signatures similar to DKIM would work if they were more integrated into mail clients. Browsers could sign emails when using webmail, it would be a functional change to browser behaviour but could end up pretty generic (eg signing for email, forum posts, maybe even credential signatures etc.
- ignoramous 7y agoAm I right when I say this is where a solution like https://keybase.io https://keybase.io helps with its cryptographically verified identities and messages?
- Bnshsysjab 7y agoI don’t use keybase but I’m pretty sure it’s a central location. If it is, and yits manual it will work in theory, but in practice only crypto nerds will verify manually so the entire thing would need to be automated.