News for hackers. Stuff that matters.

A comment on What's the matter with PGP?. Parent comment

Re:What's the matter with PGP? by frabbit on Thursday August 14, 2014 @07:41AM (#8176977)
"Now your collection of business cards is susceptible to tampering (no cryptographic authentication!)."

You are missing the part where it was suggested that the recipient of the business card telephones you and asks to verify the fingerprint.

[ Parent | on HN ]
Re:What's the matter with PGP? by frabbit on Thursday August 14, 2014 @08:04AM (#8177040)
In response to Tomte's criticism, this all boils down to the certification level http://tanguy.ortolo.eu/blog/article9/pgp-signature-infos 1) A fingerprint on a possibly compromised business card == 0 2) A fingerprint verified by phoning someone == 1 etc, And associated with that independently is of course the level of trust.

Sorry Tomte for not replying immediately to your message, but I've posted too much on this apparently.

[ Parent | on HN ]
Re:What's the matter with PGP? by Tomte on Thursday August 14, 2014 @07:50AM (#8176997)
You are missing both the "or" in his sentence (i.e. he describes alternatives, not cumulative measures) and my retort to the verification by phone.
[ Parent | on HN ]