4 ms·
>...the PGP fanbase sees their 6 levels of trust as Zimmerman dogma that must not be altered under pressure of earthly realities, or security insights developed
by upofadown 7y ago
>...the PGP fanbase sees their 6 levels of trust as Zimmerman dogma that must not be altered under pressure of earthly realities, or security insights developed after the Code was written down.
I am an actual OpenPGP shill who is entirely in favour of a very conservative approach to the standard but I really don't see the problem here. Autocrypt is a separate standard. Clients can implement it completely and just switch the trust to OpenPGP if a PGP identity shows up. There is nothing wrong with a client adding some extra trust information to accommodate autocrypt.
- brnt 7y agoAutocrypt requires its own separate PGP contacts database (regular PGP standard doesn't allow automatic key overwrites), and as such most MUAs prefer to limit the number of things they support to old PGP. This is a problem for adoption.