> That is very silly. I founded and ran what was at the time... This just seems to be an appeal to authority. I will just say your credentials do not impress m

> That is very silly. I founded and ran what was at the time... This just seems to be an appeal to authority. I will just say your credentials do not impress me. Lets just stick to two security engineers on different sides of the same industry having a technical merits discussion. In any event I did not once claim PGP encrypted reports are common, but I can say of the dozens I have received, most were very high quality from actual security researchers, and some have made me very happy I insisted such reports be decrypted offline on a machine I absolutely trust. It is good to give people options, and especially at least one that can be used anonymously with a fully open source operating system using a decentralized very widely used and established standard. I for one have made more than a few very sensitive security reports and do not own a Google or Apple controlled device or a Signal account.