3 ms·
He's right and he's right about things people pride themselves about. PGP considered harmful for being a clusterfuck.
by lallysingh 7y ago
He's right and he's right about things people pride themselves about.
PGP considered harmful for being a clusterfuck.
- matheusmoreira 7y agoNot all of PGP is bad though. PGP is really hard to use but it's still useful for signing, file encryption and authentication. Encrypted email has been outclassed in every way by modern messaging applications such as WhatsApp and Signal but currently PGP is the only good way to sign code.
- lallysingh 7y agoThe good parts are just enough to be bait, frankly. Code signing is probably the only use case left for it. Edit: nope a quick Google search finds specialized tools. They can't be harder to use or screw up than PGP, so automatically better.
- lvh 7y agoYep, see signify/minisign and OpenBSD as an example of it being used in practice.
- tptacek 7y agoIt is good for literally none of those things. See the link in the post.
- zelphirkalt 7y agoYeah surely not by Whatsapp / Facebook. It's proprietary code afaik and the possibility of third key exists for that reason. It's not trustworthy at all, especially considering the company owning it, who also told users in the past, that the data of WA and FB would never be merged or used together. WA is laughable in the context.