Re:Thunderbird, RNP, and the Importance of a Good API
by anderskaseorg on Thursday May 06, 2021 @05:04PM
(#27069026)
The article is clear about deferring fully to GnuPG on this difference of opinion:
“gpg signaled an error; the applications didn’t adhere to the API contract. I have to agree with the GnuPG developers, …”
yet making the additional point that if your API leaves room for a difference of opinion to result in a serious security vulnerability, your API might have room for improvement:
“… and add: gpg’s interface was (and remains) a disaster waiting to happen, because it doesn’t guide the user to do the right thing.”
“gpg signaled an error; the applications didn’t adhere to the API contract. I have to agree with the GnuPG developers, …”
yet making the additional point that if your API leaves room for a difference of opinion to result in a serious security vulnerability, your API might have room for improvement:
“… and add: gpg’s interface was (and remains) a disaster waiting to happen, because it doesn’t guide the user to do the right thing.”