<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 3 October 2014 18:47, Moxie Marlinspike <span dir="ltr"><<a href="mailto:moxie@thoughtcrime.org" target="_blank">moxie@thoughtcrime.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
On 10/02/2014 03:25 AM, Ben Laurie wrote:<br>
> The difference is that with CT the user whose key changes necessarily<br>
> becomes aware that it has changed. In "the simple thing?" only the<br>
> targeted user of the key is aware of this change.<br>
<br>
</span>Yes, I think this is the only difference. Both worlds require the user<br>
(and only the user) to opt into knowing what a key is and how to monitor<br>
them. In the CT world, only the owner of a key is notified, after the<br>
fact, if their key has changed. In the simple thing world, you're<br>
notified in real time for anyone you intend to send a message to.<br></blockquote><div><br></div><div>Not sure I agree with this - anyone can monitor the log, and that includes the sender (indeed, in the CT world, the sender would get the key from the log, I'd think).</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I'm not sure which world is objectively better, although I personally<br>
like the idea of being notified that what I *write* is being intercepted<br>
before it's sent, rather than whether what I *received* was intercepted<br>
after the fact.<br></blockquote><div><br></div><div>Given that you get both in CT, doesn't that make CT objectively better? :-)</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Either way, I think the net effect is roughly the same, so the question<br>
I'm posing is whether it's worth incurring the complexity cost, spam<br>
questions, organizational overhead of finding third parties, and<br>
potential conspiracy theories that might come with CT-like system,<br>
rather than just doing the simple thing.<br>
<span class="HOEnZb"><font color="#888888"><br>
- moxie<br>
<br>
--<br>
<a href="http://www.thoughtcrime.org" target="_blank">http://www.thoughtcrime.org</a><br>
</font></span><div class="HOEnZb"><div class="h5">_______________________________________________<br>
Messaging mailing list<br>
<a href="mailto:Messaging@moderncrypto.org">Messaging@moderncrypto.org</a><br>
<a href="https://moderncrypto.org/mailman/listinfo/messaging" target="_blank">https://moderncrypto.org/mailman/listinfo/messaging</a><br>
</div></div></blockquote></div><br></div></div>