GPG and OpenPGP are already there for people who *want* to understand.

Fact:  Using GPG to send secured messages should be considered child's play
for every single person on this list...  YET, I bet you that the usage of
GPG on this list for email usage is not significantly better than that of
the general populace.  Is that an issue of ease of use?   I'll suggest that
it is not.

Would making it easier increase the usage?  Probably, but not to the degree
that would make it a no-brainer.

Security is mostly a mindset issue, not a technology issue.

I'd be happier to see more effort being put into ensuring that companies
don't send you confirmation of your nice, shiny complex password in clear
text...

Let's see how Google implements this, and then we may have a useful
discussion.  Perhaps.








*ASB **http://XeeMe.com/AndrewBaker* <http://xeeme.com/AndrewBaker>
*Providing Virtual CIO Services (IT Operations & Information Security) for
the SMB market...*




On Thu, Jun 5, 2014 at 6:06 PM, Kurt Buff <[email protected]> wrote:

> On Thu, Jun 5, 2014 at 2:54 PM, Ben Scott <[email protected]> wrote:
> > On Wed, Jun 4, 2014 at 12:01 PM, Kurt Buff <[email protected]> wrote:
> >> Though long overdue, it should migrate to other browsers pretty
> easily...
> >>
> http://googleonlinesecurity.blogspot.com/2014/06/making-end-to-end-encryption-easier-to.html
> >
> >   It won't help.
> >
> >   Security requires understanding.  Users don't want to understand,
> > nor do they want to pay someone else to understand for them.
> >
> > -- Ben
>
>
> It won't help many people. It will help those who care, or can be
> induced to understand. That will have to do, as that's all we can hope
> for.
>
> Kurt
>
>
>

Reply via email to