News for hackers. Stuff that matters.

A comment on Hackers gaining power of subpoena via fake “emergency data requests”. Parent comment

Re:Hackers gaining power of subpoena via fake “emergency dat... by jandrese on Tuesday March 29, 2022 @12:42PM (#30844948)
How do you verify the PGP key for a random LEO? The web of trust is a total failure for general use verification, it only solves the special ultra-paranoid use case.

Key distribution has always been the weak point of PGP.

[ Parent | on HN ]
Re:Hackers gaining power of subpoena via fake “emergency dat... by ryukafalz on Tuesday March 29, 2022 @12:56PM (#30845176)
You would use something like WKD and not the web of trust. https://wiki.gnupg.org/WKD
[ Parent | on HN ]
Re:Hackers gaining power of subpoena via fake “emergency dat... by EricE on Tuesday March 29, 2022 @02:12PM (#30846330)
DHS already has a portal LEOs use to collaborate - would be pretty easy to set up something at the federal level - if there was the will.
[ Parent | on HN ]
Re:Hackers gaining power of subpoena via fake “emergency dat... by est31 on Tuesday March 29, 2022 @01:04PM (#30845333)
Government institutions are some of the best places where centralized certificate handling/signing infrastructures shine.
[ Parent | on HN ]
Re:Hackers gaining power of subpoena via fake “emergency dat... by jandrese on Tuesday March 29, 2022 @01:08PM (#30845407)
And yet it's basically impossible to get a government organization to sign emails except internally using MS Exchange's encrypted email support.
[ Parent | on HN ]