The PGP problem
Cryptography engineers have been tearing their hair out over PGP’s deficiencies for (literally) decades. When other kinds of engineers get wind of this, they’re shocked. PGP is bad? Why do people keep telling me to use PGP? The answer is that they shouldn’t be telling you that, because PGP is bad and needs to go away. There are, as you’re about to see, lots of problems with PGP. Fortunately, if y
Cryptography engineers have been tearing their hair out over PGP’s deficiencies for (literally) decades. When other kinds of engineers get wind of this, they’re shocked. PGP is bad? Why do people keep telling me to use PGP? The answer is that they shouldn’t be telling you that, because PGP is bad and needs to go away. There are, as you’re about to see, lots of problems with PGP. Fortunately, if you’re not morbidly curious, there’s a simple meta-problem with it: it was designed in the 1990s, before serious modern cryptography. No competent crypto engineer would design a system that looked…
related reading
- Pretty Good Privacy - Wikipediaen.wikipedia.org
- Zero Knowledge Proofs: An illustrated primer – A Few Thoughts on Cryptographic Engineeringblog.cryptographyengineering.com
- moral-fn.pdfweb.cs.ucdavis.edu
- Cryptography is not Magicloup-vaillant.fr
- Cryptographic right answers | Latacoralatacora.com
- Everything you should know about certificates and PKI but are too afraid to asksmallstep.com
- Cryptographic Right Answers: Post Quantum Edition | Latacoralatacora.com
- WireGuard: Next Generation Kernel Network Tunnelwireguard.com
- Looking back at the Snowden revelations – A Few Thoughts on Cryptographic Engineeringblog.cryptographyengineering.com
- Public-key cryptography - Wikipediaen.wikipedia.org
- The sad state of personal data and infrastructure | beepb00pbeepb00p.xyz
- https://www.philzimmermann.com/EN/essays/WhyIWrotePGP.htmlphilzimmermann.com