Re: S/MIME prep work begins!

[Robert Bihlmeyer]

[EMAIL PROTECTED] (Ben Bucksch) writes:

>     * If the default is "Generate a new key", and users don't
>       care/understand, we risk that our users flood the world with their
>       certificates.

Sure. But are the consequences really that bad?

>       We'd end up with lots of certificates for a single user, which
>       would have the consequence that nobody cares about the
>       validity anymore, which means that security goes south again.

I don't see how security changes just because a lot of people will not
employ the tools very securely.

We just shouldn't imply that because you sprinkle magic crypto dust on
an e-mail, that it is automatically genuine. People still need to use
their brain, or they will lose sometimes.

-- 
Robbe