7 ms·
Moxie is just one of several security experts who are fed up with PGP. For a similar article see [What’s the matter with PGP?][1] or [The PGP Problem][2]. [1]:
by tao_oat 6y ago
Moxie is just one of several security experts who are fed up with PGP. For a similar article see [What’s the matter with PGP?][1] or [The PGP Problem][2].
[1]: https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp https://blog.cryptographyengineering.com/2014/08/13/whats-ma...
[2]: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
- floatingatoll 6y agoFWIW, that markup doesn’t work here.
- bronson 6y agoIt’s still more readable than just inlining the urls.
- upofadown 6y agoMy response to "The PGP Problem": * https://articles.59.ca/doku.php?id=pgpfan:tpp https://articles.59.ca/doku.php?id=pgpfan:tpp
- tptacek 6y agoThis is a good response for people who believe "[PGP has an extensible record format] because a long term standard must be extensible". I think you would have trouble finding cryptography engineers who think this is a strong statement; the last 20-odd years of practical cryptography research have instead made a very strong case that the most "extensibility" you want in a cryptosystem is a version number. I think the rest follows from there. It's easy to mount of a defense of PGP if you just ignore cryptography engineering and focus on how important it is for tools to follow the same proven Unix-flavored design as Awk. Which, of course, is what PGP is: the Awk of cryptography.
- tptacek 6y agoThe interesting question isn't "how many cryptography engineers repudiate PGP"; it's "how many cryptography engineers stick up for it". I'd be interested in some examples of that. Are there any?
- rmrfstar 6y agoPlenty of people stick up for individual aspects of the PGP architecture. Apple sticks up for non-ephemeral message keys by implementing that in iMessage. A lot of people stuck up for non-repudiation when Matthew Green asked Google to publish its DKIM keys. Non-repudiation and key disclosure are two of the bigger problems with PGP, so in that sense people still stick up for PGP.
- tptacek 6y agoCan you name a well-known cryptography expert who has within the last 15 years written any kind of defense of PGP?
- deleted 6y ago[deleted]
- rmrfstar 6y agoYeah, me. I solved this thing called the cryptopals challenge. You've probably never even heard of it. Only elite hackers know about it. Edit: Clearly I'm not funny.