3 ms·
To be fair, "properly operationalised" anything is probably secure, or sensibly degrades when the axioms are up. I think the question is, "what is the cost of
by anotherhue 2y ago
To be fair, "properly operationalised" anything is probably secure, or sensibly degrades when the axioms are up.
I think the question is, "what is the cost of properly operationalising" it. TFA mentions frequent manual rekeying as a poor man's PFS. Life is too short for that.
(I knew this discussion would summon you like a ghost of crypto past).
- tptacek 2y agoRight, but I'm trying to ask a more interesting question. What are actual real-world security problems where you're comfortable using PGP, and what are some problems where that's not enough for you? As someone else on the thread alluded to: what's missing from a lot of discussion of PGP is "what are you using it for". "Secure email" can't be the answer; what exactly are you emailing?
- shitter 2y agoAnswering that on HN is the final operational security failure listed in the article.