Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Relevance of PGP?



I am very surprised to hear people using the term "PGP" as if it were
synonymous with "Email signing/encryption."  As far as I'm concerned, S/MIME
has already won the war on email signing/encryption.  Go get a free
certificate from startssl.com, and voila.  (See here:
http://tinyurl.com/6xegsux and http://tinyurl.com/685jpn8 )   There is no
need to do a key exchange with anyone - The browser already has a list of
trusted SSL CA's, and anyone receiving your mail is automatically able to
verify the integrity.  Every mail client supports it, it's way more
intuitive and simple to use than PGP.

But anyway, I make a habit of signing most of my mail (there's a checkbox to
make that automatic, so I actually don't do anything at all.)  And then
whenever I want to email passwords or some other sensitive info with
somebody, it's a breeze to simply click the "encrypt" button.

The days of saying "Don't email passwords" and "Email is insecure" are not
over.  But you can certainly solve it on an as-needed basis.






BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org