4 ms·

> personal vendetta This is a weird definition of "personal", like PGP kicked his dog or something. The arguments he makes against it are detailed and the agre

> personal vendetta This is a weird definition of "personal", like PGP kicked his dog or something. The arguments he makes against it are detailed and the agreement of most working cryptographers, even if they don't agree with his specific deprecation schedule. Some people would call that "good engineering".

dcow 4y ago
“Good engineering” would be to meticulously develop and standardize a replacement before idealistically purging the world of alleged “bad software”. Since this endeavor has yet to be undertaken, PGP it is. Good engineers understand this reality. Look, you can make solid arguments till you are blue in the face about why PGP is unclean and unfit for modern cryptography. And you can be 100% right. But that doesn't mean people who disagree are wrong. There are 100% valid arguments and use cases for PGP too. It takes a mature personality to understand this nuance. And to understand that sharing a mic drop piece about why PGP sucks, getting your security buddies to laugh with you, and then trying to rip it out of existence is incredibly short sighted, ill mannered, and not in the least bit “good engineering”.
- SSLy 4y ago
  > develop and standardize a replacement https://en.wikipedia.org/wiki/S/MIME https://en.wikipedia.org/wiki/S/MIME ok, I jest.
- morelisp 4y ago
  > rip it out of existence Come the fuck off this "mature personality" shit if you're going to write like this. He proposed freezing a module no one wanted to maintain in a library specifically meant to host stuff with weaker compat guarantees, he didn't hop in a DeLorean and kill Zimmermann's grandpa. Meanwhile, the critical project Drew insisted he keep it for is... deprecated and unmaintained!
  - dcow 4y ago
    [flagged]
    - morelisp 4y ago
      [flagged]
    - tptacek 4y ago
      In the context we're talking about here, "arguments they don't understand" is incredibly rude and also inaccurate. Please be more careful.
      - dcow 4y ago
        That was referencing past conversations I've had where it was very much like I describe. I'll admit I'm channeling some past frustrations and stereotyping and apologize for not making the distinction clear. I am not referring to you or anyone here or anyone on the golang thread, for the record.
    - akerl_ 4y ago
      What's the use case for PGP that doesn't have an alternative?

dcow 4y ago

“Good engineering” would be to meticulously develop and standardize a replacement before idealistically purging the world of alleged “bad software”. Since this endeavor has yet to be undertaken, PGP it is. Good engineers understand this reality. Look, you can make solid arguments till you are blue in the face about why PGP is unclean and unfit for modern cryptography. And you can be 100% right. But that doesn't mean people who disagree are wrong. There are 100% valid arguments and use cases for PGP too. It takes a mature personality to understand this nuance. And to understand that sharing a mic drop piece about why PGP sucks, getting your security buddies to laugh with you, and then trying to rip it out of existence is incredibly short sighted, ill mannered, and not in the least bit “good engineering”.

SSLy 4y ago
> develop and standardize a replacement https://en.wikipedia.org/wiki/S/MIME https://en.wikipedia.org/wiki/S/MIME ok, I jest.
morelisp 4y ago
> rip it out of existence Come the fuck off this "mature personality" shit if you're going to write like this. He proposed freezing a module no one wanted to maintain in a library specifically meant to host stuff with weaker compat guarantees, he didn't hop in a DeLorean and kill Zimmermann's grandpa. Meanwhile, the critical project Drew insisted he keep it for is... deprecated and unmaintained!
- dcow 4y ago
  [flagged]
  - morelisp 4y ago
    [flagged]
  - tptacek 4y ago
    In the context we're talking about here, "arguments they don't understand" is incredibly rude and also inaccurate. Please be more careful.
    - dcow 4y ago
      That was referencing past conversations I've had where it was very much like I describe. I'll admit I'm channeling some past frustrations and stereotyping and apologize for not making the distinction clear. I am not referring to you or anyone here or anyone on the golang thread, for the record.
  - akerl_ 4y ago
    What's the use case for PGP that doesn't have an alternative?