Re:Roundcube Webmail 1.2.0 released with PGP support
by lmm on Monday May 23, 2016 @10:54AM
(#11754227)
Can you get a free S/MIME certificate? Even if you could, S/MIME leaves you dependent on CA infrastructure that's often state-controlled.
[ Parent
| on HN ]
Re:Roundcube Webmail 1.2.0 released with PGP support
by elgaton on Monday May 23, 2016 @12:01PM
(#11754700)
StartSSL [1] and COMODO [2] still offer them (of course, there's still the CA compromise issue you mentioned). Keep in mind, however, that a hierarchical, centralized trust model can still be useful (e.g. in medium-to-large organizations, where having an internal CA and delegating identity verification to a few knowledgeable employees is more practical than having everyone build a web of trust).
[2] https://www.comodo.com/home/email-security/free-email-certif...
Re:Roundcube Webmail 1.2.0 released with PGP support
by lmm on Tuesday May 24, 2016 @04:40AM
(#11759832)
> Keep in mind, however, that a hierarchical, centralized trust model can still be useful (e.g. in medium-to-large organizations, where having an internal CA and delegating identity verification to a few knowledgeable employees is more practical than having everyone build a web of trust).
Sure, but it's easy to build that kind of model on top of OpenPGP (just have an organizational signing key and tell everyone to trust that), whereas it's almost impossible to build a CA-independent model on top of SSL.