4 ms·

Thanks for the number, it's very informative. I guess there's still the solution to only accept message from trusted keys but that means that 1- we have to be

by p4bl0 12y ago

Thanks for the number, it's very informative. I guess there's still the solution to only accept message from trusted keys but that means that 1- we have to be able to detect signature-rings from spammers in the graph (that clearly should not be a big problem), and 2- that there is an easy and realistic way to have a legitimate key in the trusted network before it can be used to sends emails… Anyway, all that is very interesting from a theoretical point of view, but we are far from being in a world where end-to-end crypto is massively used.

xorcist 12y ago
You could set up your MUA today so that anyone you've already emailed with gets put in a priority folder. No need to mess with end to end encryption just for that functionality. Theoretically, any spammer could research you enough to send to mail purporting to be from your friends, but realistically no one would bother.
pyre 12y ago
> trusted keys The problem with Web-of-Trust is that once you try to roll it out mainstream, most people will just click "accept" or "I trust this key" without thinking about it. Instead of "signature-rings from spammers" you would have spammers duping less-aware real people into trusting their keys. That said, it would seem to be a longer feedback loop to get a number of actual people to open emails and trust their keys.
- p4bl0 12y ago
  > most people will just click "accept" or "I trust this key" without thinking about it What if they don't have to do that because it's transparently done for them when they use the "flag as spam", "not spam", and "reply" buttons for instance?