Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Mark Woodward
On 06/10/2011 09:34 AM, Bill Ricker wrote: On Fri, Jun 10, 2011 at 8:12 AM, Edward Ned Harveyb...@nedharvey.com wrote: Go get a free certificate from a signature with a free CA cert deserves no trust - it verifies the email address was the email address on a certain date only. I find that

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Tom Metro
Edward Ned Harvey wrote: I am very surprised to hear people using the term PGP as if it were synonymous with Email signing/encryption. As far as I'm concerned, S/MIME has already won the war on email signing/encryption. I wish that were true, but can you name any organization that routinely

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Rob Hasselbaum
On Fri, Jun 10, 2011 at 12:05 PM, John Abreau j...@blu.org wrote: As far as I'm concerned, using S/MIME means handing off control of who I trust to an unknown mix of government and corporate entities who have no vested interest in actually protecting my privacy.For the corporate entities

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Richard Pieri
On Jun 10, 2011, at 9:34 AM, Bill Ricker wrote: On Fri, Jun 10, 2011 at 8:12 AM, Edward Ned Harvey b...@nedharvey.com wrote: Go get a free certificate from a signature with a free CA cert deserves no trust - it verifies the email address was the email address on a certain date only.

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Matthew Gillen
On 06/10/2011 12:44 PM, Tom Metro wrote: Edward Ned Harvey wrote: I am very surprised to hear people using the term PGP as if it were synonymous with Email signing/encryption. As far as I'm concerned, S/MIME has already won the war on email signing/encryption. I wish that were true, but

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Richard Pieri
On Jun 10, 2011, at 1:05 PM, Mark Woodward wrote: What we need is a mechanism to distribute and verify public keys. You've just described a certificate authority: a mechanism that distributes and verifies public keys (certificates). What we need is a verification mechanism that is

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Tom Metro
John Abreau wrote: As far as I'm concerned, using S/MIME means handing off control of who I trust to an unknown mix of government and corporate entities who have no vested interest in actually protecting my privacy.For the corporate entities involved, their only vested interest is short-term

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Mark Woodward
On 06/10/2011 02:06 PM, Richard Pieri wrote: On Jun 10, 2011, at 1:05 PM, Mark Woodward wrote: What we need is a mechanism to distribute and verify public keys. You've just described a certificate authority: a mechanism that distributes and verifies public keys (certificates). What we need

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Tom Metro
Mark Woodward wrote: OTR encrypts an IM TCP stream so that agents between the two end points shouldn't be able to read the data. Technically, I believe OTR encrypts the message, which then gets handed off to the particular IM protocol, which in turn is transported via TCP. I imagine there is a

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread Mark Woodward
On 06/10/2011 08:50 PM, Tom Metro wrote: Mark Woodward wrote: OTR encrypts an IM TCP stream so that agents between the two end points shouldn't be able to read the data. Technically, I believe OTR encrypts the message, which then gets handed off to the particular IM protocol, which in turn is

Re: [Discuss] Relevance of PGP?

2011-06-10 Thread John Abreau
Isaac Asimov had a famous short story with that title. I hadn't heard of Phillip K. Dick using the title. Asimov's story was about a history professor who was obsessed with ancient Carthage, and he was denied use of the government's time viewer to do his research. He then recruited a young