[messaging] OpenPGP Trust is broken Was: On Signed-Only Mails

[Phillip Hallam-Baker]

On Thu, Dec 8, 2016 at 12:25 PM, Tony Arcieri <bascule at gmail.com> wrote:

> On Thu, Dec 8, 2016 at 5:10 AM, Phillip Hallam-Baker <
> phill at hallambaker.com> wrote:
>
>> Yes, the OpenPGP Key servers are a 'dumpster fire'. But that affects
>> confidentiality and integrity equally. And if you think that is a problem
>> then you should start looking at ways to fix the OpenPGP trust
>> infrastructure because what you are saying is that the issues you have
>> identified make the system arguably worse than useless.
>>
>
> CONIKS seems like a step in the right direction.
>
>
​There are plenty of ways to go about fixing the trust issue. But
pretending it is not an issue and deciding we don't need features that
depend on having a working trust model is not one of them.​
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20161208/7e757fc6/attachment.html>