4 ms·
Like I have said in another comment, the question of identity verification makes no sense in this context. The identity verification problem is orthogonal to th
by johnisgood 1y ago
Like I have said in another comment, the question of identity verification makes no sense in this context. The identity verification problem is orthogonal to the encryption scheme.
See: https://news.ycombinator.com/item?id=45919561 https://news.ycombinator.com/item?id=45919561
- tptacek 1y agoThat is an extremely weird argument. They aren't separable concerns. If you have a trusted identity in place you could use a password-protected AES ZIP file for all the encryption matters.
- johnisgood 1y agoThere are too many threads, see: https://news.ycombinator.com/item?id=45919651 https://news.ycombinator.com/item?id=45919651. I don't see why we got here from PGP though. > I think I'm missing something, how does asking for their public key improve security or verify their identity? OK, so this was the question. My response should have been "it does not necessarily verify their identity". I mentioned some of the mechanisms for identity verification in the other thread.