5 ms·
> You need to be deliberate about signing and encrypting because security should be a careful and deliberate act. Why? You don't have to be 'deliberate' about
by velis_vel 13y ago
> You need to be deliberate about signing and encrypting because security should be a careful and deliberate act.
Why? You don't have to be 'deliberate' about encrypting when you're using SSH or HTTPS.
- stinkytaco 13y agoTrue, but we're putting a lot of trust in third parties in that situation, no? HTTPS requires us to say "sure Verisign [or insert authority here], I believe you." If I'm doing that, why not just trust Google? Why use email encryption at all? SSH is more in our control, but it's still trusting a third party (a server) and it still requires a deliberate act to set up and use (unlike HTTPS).