3 ms·
Some of the choices are neither privacy nor security improvements. Take quarantine or integrity protection or signature validation for example. Those three alon
by oneplane 4y ago
Some of the choices are neither privacy nor security improvements. Take quarantine or integrity protection or signature validation for example. Those three alone limit drive-by binary malware rather effectively.
The only thing one could argue for in a privacy oriented manner is the signature validation with OCSP checks since it somewhat leaks what signature owners you're trying to check. But without it you'll never be able to find out if a signature was revoked, including self-signed signatures.
- flyinghamster 4y agoIt's a tradeoff. You can have your built-in anti-malware, or you can choose not to leak information on the files you open. Which is more important is not a "one size fits all" situation. If you shut any of that off, you should be aware of the implications, as it is a potential footgun. It's good that things with security ramifications are separated, but they must be used with care.
- layer8 4y ago> if a signature was revoked if a certificate was revoked (Just to prevent confusion. Someone might think that it’s possible to revoke individual signatures.)