5 ms·
PGP has RFCs (2440 and 4880) but people still complain about it. https://datatracker.ietf.org/doc/html/rfc4880 https://datatracker.ietf.org/doc/html/rfc4880
by _wldu 5y ago
PGP has RFCs (2440 and 4880) but people still complain about it.
https://datatracker.ietf.org/doc/html/rfc4880 https://datatracker.ietf.org/doc/html/rfc4880
- tptacek 5y agoBecause nothing in the PGP RFCs matters; all that matters is what the most widely installed version of GnuPG accepts. This is part of what I'm talking about when I'm derisive of IETF cryptography standards, which are, generally, a force for evil.
- _wldu 5y agoThat makes me wonder if people are complaining about OpenPGP or instead about GnuPG? It probably doesn't really matter, but many newer encryption solutions ridicule PGP in general. Now I wonder if they mean to ridicule GnuPG instead?
- tptacek 5y agoIt's all the same thing. People talk about the standard as if it's an important thing by itself, but it has literally no meaning outside the installed base. You can't rehabilitate OpenPGP by observing that the standard allows you to implement it safely, because the installed base is what controls.