4 ms·

I am not sure how fair is this? You are complaining about "forward secrecy" and "deniability" being hard -- fair enough, but PGP does not provide either of tho

by theamk 6y ago

I am not sure how fair is this? You are complaining about "forward secrecy" and "deniability" being hard -- fair enough, but PGP does not provide either of those! So if you want to be "as good as PGP", there is no need to learn those concepts. The "safety numbers" concept does need to be learned, but I think it is way easier to explain than PGP key management. The goal is not to have the perfect system, it is to have something better than PGP. And this is a pretty low bar.

upofadown 6y ago
>So if you want to be "as good as PGP", there is no need to learn those concepts. Sure, but we really have to aspire to be better than PGP. We are obviously missing the point if we are wasting time on new features when no one can use the old features. >The "safety numbers" concept does need to be learned, but I think it is way easier to explain than PGP key management. If the question is "why do I have to care when the safety number changes" then the answer still involves the basic concept of cryptography identity in both cases.