2 ms·
Yes, that's a good point. However you are always somewhat reliant on a third party to do the security for you whether that is a CA or an app developer. That thi
by jiggy2011 13y ago
Yes, that's a good point. However you are always somewhat reliant on a third party to do the security for you whether that is a CA or an app developer. That third party has to be trusted. It doesn't solve the fundamental problem of:
Alice -> Bob
without doing.
Alice -> Facebook -> Bob
Unless both alice and bob know how to generate and manage their own keys (and verify each others keys).
- tptacek 13y agoNo, also not true. You can use the TLS protocol to build a "web of trust" scheme just like GPG's out of self-signed certificates and key continuity.
- jiggy2011 13y agoRight, but web of trusts/PGP are inconvenient in a way that "look for the padlock icon" isn't. Which is likely why they are not in widespread use by the general populous.