3 ms·
The parent is focusing on carefulness, and not malicious intent. If being careful requires you to be knowledgeable in computer security or cryptography, we're n
by soraminazuki 7y ago
The parent is focusing on carefulness, and not malicious intent. If being careful requires you to be knowledgeable in computer security or cryptography, we're never going to have a secure communication system because people aren't going to spend years learning those things to simply talk to people. Secure defaults matter, and not being able to configure and use GPG correctly is hardly "incompetence."
- cwyers 7y agoExactly this. tptacek's article talks about issues like someone replying (with the messages quoted) in cleartext by mistake, or leaking their keys. In a messenger like Signal, there's no easy way to accidentally reply in cleartext, and key management is handled for you so it's not possible to accidentally send the private key instead of the public key. It's not enough for _you_ to never do those things, you have to trust your correspondent to be capable to do those things without error (which is different than trusting them to not intentionally disclose).