4 ms·
The UI is too complex, and the security of the ring of trust relies on the key signing. It would suffer poor key signing habits that no noobs understand. Plus
by SFjulie1 12y ago
The UI is too complex, and the security of the ring of trust relies on the key signing. It would suffer poor key signing habits that no noobs understand.
Plus for key signing, I need to show my papers... What if my interlocutor is an infiltrated whatever? I just blew away my identity. Else, my key worths nothing.
Plus like decentralized certificate system it is vulnerable to a majority attack. Sometimes a local majority in time or space is sufficient.
It requires too much knowledge to be applied correctly.
Service Secret loves to know a secret is exchange and GPG is like telling "hé Deep Packet Inspection terrorist one with well known address1 is talking to well known terrorist2 with address2 and key2"
Secret services do not really care about the secret ... They care about sociograms
Well the only good use I see for GPG mail is to make the content of a mail as valid as a formal contract between two parties.
- VienneseCPA 12y agoHeh, no. GPG mitigates a wide spectrum of threats. Not all threats. It's part of an over-all strategy of risk management. Your thinking of "it's a silver bullet that fails completely" is as lulzy as the people who think "it's a silver bullet that works perfectly." Think probabilistically, not black-and-white binary logic.
- SFjulie1 12y agoProbability: - I experienced lots of gifted geeks doing stupid things with key signing party (like creating fake ID for their cats); - I experienced IT specialist from the security unable to use GPG with their mailbox to send their forms to RIPE so we used clear text passwords in mail (yes they were of course security experts); - I know for real secret services care more about who talks to whom secretly than what is the secret. And using GPG/PGP is like a smoking gun. I did too lost all my floppy disk with my revocation key. I do use my PGP key to sign my python packages. But this UI/UX is hellish. So yes, GPG sux and is unusable by mere mortals, and even me who advocated for it in the late 90's think that I will not let anyone try to drag any relatives of mine close to this hell, because I would have to do the support, and this product sux big balls.
- VienneseCPA 12y agoThis sounds like a deeply emotional issue for you. Do keep in mind that other people have a wildly different history with GPG than yours.