Re:Proposal to start a new implementation of Thunderbird bas...
by WalterBright on Friday April 21, 2017 @03:35PM
(#14168678)
> because the key could be MITMd.
That's true, and my paper mail envelope could be steamed open, read, and resealed as well. I'm not saying this would result in perfect security, and anyone would be foolish to treat it as good enough to direct their U-boat fleet. But it would be pretty good for routine email.
As for the key exchange, if a user is worried about it, they could exchange keys in another way. The point about the built-in key exchange is that it happens by default.
> more painful key management problem.
It's only painful if you really need high security. I'd just like something better than postcard security.
That's true, and my paper mail envelope could be steamed open, read, and resealed as well. I'm not saying this would result in perfect security, and anyone would be foolish to treat it as good enough to direct their U-boat fleet. But it would be pretty good for routine email.
As for the key exchange, if a user is worried about it, they could exchange keys in another way. The point about the built-in key exchange is that it happens by default.
> more painful key management problem.
It's only painful if you really need high security. I'd just like something better than postcard security.