2 ms·
If you need any more evidence of PGP being used poorly, just look at Darknet markets. It's effectively the standard for communication with vendors there. Here's
by technion 6y ago
If you need any more evidence of PGP being used poorly, just look at Darknet markets. It's effectively the standard for communication with vendors there. Here's a first Google link for the matter:
https://thebitcoinnews.com/how-to-encrypt-messages-with-pgp-when-using-darknet-markets/ https://thebitcoinnews.com/how-to-encrypt-messages-with-pgp-...
We can quote: "Don’t let the name mislead you: Pretty Good Privacy (PGP) is better than good – it’s excellent." Definitely at odds with a lot of the community. But lets go on.
One of the next Google hits is this fantastic "tool" often recommended for users:
https://darknetmarkets.org/pgp/ https://darknetmarkets.org/pgp/
Yes, it's a website that generates your keys for you. Added bonus, "e-mail address: Required".
Assuming people are smart enough to use their own local key generator, how many do you want to bet effectively dox themselves signing with real email addresses?
- upofadown 6y agoThe darknet howtos tend to emphasize that you should not use a real email address and not to use an online key generator. The online key generator you mentioned itself recommends not to use it and provides links to programs and howtos. PGP is actually the best available tool here. Something like Signal would involve way too much meta information leakage.