Re: PSM 2.0 (PIP) docs now available

[Ben Bucksch]

John Gardiner Myers wrote:

> Ben Bucksch wrote:
> 
>> It would make a lot more sense to me to show the type of "security"
>> (signed yes/no *and* encrypted yes/no) and the strength (algorithm, key
>> length) there. I must be missing something...
> 
> Encryption means little without signing.  Without signing, you could
> easily have a 128-bit encrypted conversation with an impersonator.

The icon currently shows signature, right? (I'm not sure, that's why I 
used that form of expression.) So, currently, I have to open the dialog 
to see, if the transfer is actually encrypted (which I expect almost 
always for secure sites). That's suboptimal. (That's why I proposed to 
make this accessible via tooltip.)

Alternatively, maybe change the icon to mean locked = signed *and* 
encrypted (maybe even require reasonable strength), unlocked = 
everything else?

-- 
This post is protected by ROT0 encryption and the DMCA.
Reading is disallowed and will be prosecuted.