A thorough PGP tutorial

Re:A thorough PGP tutorial by 23david on Monday July 08, 2013 @03:34AM (#6005595)

So perhaps that's an issue with the UI not clearly showing which CA is verifying the identity, and alerting you clearly if an encrypted email is using a different CA than prior ones.

Depending on the client you're using, it shouldnt be too hard to prune the trusted CA list to only include providers you choose to trust. If you want, only include your CA and remove all others.

[ Parent | on HN ]

Re:A thorough PGP tutorial by JoachimSchipper on Monday July 08, 2013 @11:30AM (#6007251)

So instead of PGP - which is already quite daunting, mind - the user now get to assess the security of 200+ CAs, most of which they've never heard of?

[ Parent | on HN ]

Re:A thorough PGP tutorial by 23david on Monday July 08, 2013 @01:12PM (#6007820)

You're right, this wouldn't make a lot of sense for most users.

But this would be useful in a corporation where it's possible to centrally manage CA lists for approved applications.

[ Parent | on HN ]