Relevance of PGP?

Edward Ned Harvey blu-Z8efaSeK1ezqlBn2x/YWAg at public.gmane.org
Tue Jun 14 21:54:56 EDT 2011


> From: Derek Martin [mailto:invalid-yPs96gJSFQo51KKgMmcfiw at public.gmane.org]
> Sent: Tuesday, June 14, 2011 7:14 PM
> 
> The upshot of that is that it doesn't matter how much you trust your
> bank's online security.  You gain nothing by not trusting the service,
> because your info is already available to your would-be attacker.  You

Well, I don't think that's quite fair or true...  I would contend that
simply having my bank info in the bank servers does not automatically serve
up my bank info to would-be attackers.  Even if the would-be attacker has
compromised a major root CA and successfully poisoned DNS in order to
perpetrate a MITM attack...  That attack will not get any of my personal
information if I'm not using the service.





More information about the Discuss mailing list