Robert J. Hansen:

> To be clear, I'm not objecting to Werner's
> characterization of sites like keys.openpgp.org being
> single points of failure. I'm objecting to the idea
> decentralization is a core part of *PGP, as opposed to
> it being just another capability that can be used or
> discarded as the situation demands.

I am with Werver on this one: It is by desing that PGP
works locally offline, with no requirements for a data
exchange protocol, which may happen by any internet
channel, or physically, when a you pass a piece of paper
to another person.

Futhermore, all data exchage can take place on a point-
to-point basis, without any intermediary whatsoever.
Therefore, I see keyservers as a centralised
superstructure put on top of the decentralised PGP
basis.  PGP works with any centralised third-party
services exactly because it is decentralised by nature.

Conversely, you cannot put a decentralised
superstructure on top of a centralised system.

-- 
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments

Attachment: pgpMujDSnguS9.pgp
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to