4 ms·

I would appreciate it if you answered to the rest of my comment. It may be quite useful.

tptacek 1y ago
I will not, because I joined this subthread to make a specific point (that the other commenter was simply wrong that the archaisms in PGP/OpenPGP are a mere consequence of GnuPG and avoidable by avoiding GnuPG), and this whole subthread has been an exercise in avoiding that point and switching to other more tractable arguments. I'm sorry, but I'm not interested.
- johnisgood 1y ago
  Cool, so we got two people here who kept saying "PGP is shit", but when asked for an alternative, they weasel out with "no thanks", or "I will not [say]"? Yeah, okay. Got it. I hope you realize it weakens everything you have said. Hell, there is nothing to weaken to begin with! > (that the other commenter was simply wrong that the archaisms in PGP/OpenPGP are a mere consequence of GnuPG and avoidable by avoiding GnuPG) Didn't read it like that though, it read like "OpenPGP is shit", and I could quote you where you are claiming exactly that: > outmoded fundamentally, not just by one implementation You said this, about OpenPGP. Welp.
  - johnisgood 1y ago
    s/for an alternative/for an alternative or an explanation as to why OpenPGP is shit/
  - tptacek 1y ago
    While obviously I can present alternatives to OpenPGP and have done so, including on this thread, it's important that you understand that this isn't how engineering works. If something is observed to be flawed, it's flawed. Whether or not alternatives are presented with the observation doesn't change its validity.
    - johnisgood 1y ago
      I understand what you are saying. Can you tell me in what ways OpenPGP is flawed and what the alternative is to achieve everything GPG supports? Legit question. If it does everything GPG does, but does it better, then people (including me) may switch.
      - tptacek 1y ago
        I'm really not interested in whether you switch. To me, for the problem domains we're really talking about, this is like talking someone out of wearing a Kangol hat. You do you.
        johnisgood 1y ago
        This is absurd. You have not told me (or anyone else for that matter) what to switch to and why. You cannot be taken seriously. At this point I think you are full of shit. If you care about security, you should care about people switching, but you do you. Keep it to yourself, keep it a secret, and keep bitching about OpenPGP, I suppose.

I will not, because I joined this subthread to make a specific point (that the other commenter was simply wrong that the archaisms in PGP/OpenPGP are a mere consequence of GnuPG and avoidable by avoiding GnuPG), and this whole subthread has been an exercise in avoiding that point and switching to other more tractable arguments. I'm sorry, but I'm not interested.

johnisgood 1y ago
Cool, so we got two people here who kept saying "PGP is shit", but when asked for an alternative, they weasel out with "no thanks", or "I will not [say]"? Yeah, okay. Got it. I hope you realize it weakens everything you have said. Hell, there is nothing to weaken to begin with! > (that the other commenter was simply wrong that the archaisms in PGP/OpenPGP are a mere consequence of GnuPG and avoidable by avoiding GnuPG) Didn't read it like that though, it read like "OpenPGP is shit", and I could quote you where you are claiming exactly that: > outmoded fundamentally, not just by one implementation You said this, about OpenPGP. Welp.
- johnisgood 1y ago
  s/for an alternative/for an alternative or an explanation as to why OpenPGP is shit/
- tptacek 1y ago
  While obviously I can present alternatives to OpenPGP and have done so, including on this thread, it's important that you understand that this isn't how engineering works. If something is observed to be flawed, it's flawed. Whether or not alternatives are presented with the observation doesn't change its validity.
  - johnisgood 1y ago
    I understand what you are saying. Can you tell me in what ways OpenPGP is flawed and what the alternative is to achieve everything GPG supports? Legit question. If it does everything GPG does, but does it better, then people (including me) may switch.
    - tptacek 1y ago
      I'm really not interested in whether you switch. To me, for the problem domains we're really talking about, this is like talking someone out of wearing a Kangol hat. You do you.
      - johnisgood 1y ago
        This is absurd. You have not told me (or anyone else for that matter) what to switch to and why. You cannot be taken seriously. At this point I think you are full of shit. If you care about security, you should care about people switching, but you do you. Keep it to yourself, keep it a secret, and keep bitching about OpenPGP, I suppose.