SoylentNews is people
SoylentNews
An Op-Ed piece from ArsTechnica:
Every once in a while, a prominent member of the security community publishes an article about how horrible OpenPGP is. Matthew Green wrote one in 2014 and Moxie Marlinspike wrote one in 2015. The most recent was written by Filippo Valsorda, here on the pages of Ars Technica, which Matthew Green says "sums up the main reason I think PGP is so bad and dangerous."
In this article I want to respond to the points that Filippo raises. In short, Filippo is right about some of the details, but wrong about the big picture. For the record, I work on GnuPG, the most popular OpenPGP implementation.
This discussion has been archived.
No new comments can be posted.
Op-Ed: Why I'm Not Giving Up on PGP
|
Log In/Create an Account
| Top
| 26 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Either I'm dead or my watch has stopped.
-- Groucho Marx's last words
(Score: 2) by TheRaven on Tuesday December 27 2016, @07:46AM
Both your argument and the original article's argument is "PGP support sucks" which is 1. not a problem with PGP itself and 2. a chicken-and-egg problem of adoption.
That's not quite my argument. My argument is that there are two standards for doing encrypted email. One is well supported by all mail clients out of the box and easy to use, the other is PGP.
sudo mod me up
(Score: 2) by darkfeline on Tuesday December 27 2016, @06:04PM
S/MIME works well when supported by corporate IT. I have had less luck getting S/MIME to work in a personal context than I've had with PGP.
If companies used PGP internally, it'd work just as well as S/MIME.
Join the SDF Public Access UNIX System today!