4 ms·
It's almost as if such emails should be PGP signed.
by midtake 3y ago
It's almost as if such emails should be PGP signed.
- eqvinox 3y agoAnd how do you establish that a particular PGP key is being used by an authorized party in an official capacity for a valid purpose? If you said S/MIME, that'd actually make sense with the X.509 authority system, but PGP with its WoT is just entirely the wrong tool here.
- midtake 3y agoFair. For what it's worth I thought that PGP's trust system could operate in a similar manner to the X.509 authority system.
- deleted 3y ago[deleted]
- ycombinatrix 3y agoPGP has an archaic trust system that likely wouldn't have helped in this case.