Encouraging email security.
Yenot
yenot@sec.to
Wed May 21 14:19:34 2003
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Sunday 18 May 2003 08:06 am, David Picon Alvarez wrote:
> I don't think it's a question of UI any more, I
> think it's a question of needs and threat models. If you don't need
> something and it carries a cost you're not likely to use it.
> Perhaps the only way to get people to use encryption is to have a
> so-called "zero-UI solution" but even so, unless it would come
> incorporated in the MUA, I don't see people bothering to install
> it.
That's the wrong attitude. Cost is the problem -- clever UI is the
solution! The lower the cost of encryption (workload and monetary
costs), the more people will use it. I've followed PGP for many
years, and I'm more optimistic about it now than ever before. Secure
e-mail *can* be reborn.
The reason: A new class of *free*, full featured, e-mail clients with
fully integrated OpenPGP support *has* appeared. These OpenPGP
enabled clients do not require expensive S/MIME certificates and
their implementations are interoperable. (Certificate cost being the
dead-birth of S/MIME and interoperability being a major holdback for
both S/MIME and OpenPGP in the past.)
If we can lower the cost of key distribution and authentication via
innovative software design, rebirth of OpenPGP *can* happen. Thanks
to KMail and the latest commercial PGP, I am sending more encrypted
e-mail than ever before!
I'm borderline paranoid. I've had my e-mail read numerous times and
I've read others mail (by orders from superiors no less). Even for a
user like myself, OpenPGP was nothing but a toy until KMail came to
my rescue. For me, KMail removed the pain of encrypted e-mail. But
even now the cost is too high, we need to lower it further.
- Yenot
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE+yXWFP247TY29IxARAkkSAJ4oNjtP/oyI3dESMVJUQ+Q3APAOvQCgiFbk
0pmrcbF3ekqu2t54Gc/evxE=
=0tCP
-----END PGP SIGNATURE-----