News for hackers. Stuff that matters.

A comment on Creating the perfect GPG keypair. Parent comment

Re:Creating the perfect GPG keypair by tptacek on Sunday December 13, 2015 @09:11AM (#10726372)
I agree. Almost nobody who uses GPG does any of this.

I think people should use GPG without any of the extra options, bells, and whistles. If they really need advanced usage stuff, they should use something better than PGP.

[ Parent | on HN ]
Re:Creating the perfect GPG keypair by pmoriarty on Sunday December 13, 2015 @10:34AM (#10726558)
This makes me wonder why GPG isn't more secure by default. If these are the "perfect" settings, why aren't they the defaults?

What happened to making the right thing to do the easiest thing to do?

[ Parent | on HN ]
Re:Creating the perfect GPG keypair by wdewind on Sunday December 13, 2015 @12:14PM (#10726938)
> something better than PGP

Correct me if I'm wrong, but it seems like a lot of the issues are in implementing PGP in email, not in the cryptography itself. If you made a messaging app that automatically used best practices PGP without any of the email holes/workflow issues, would there still be something significantly better for data at rest?

[ Parent | on HN ]