On Wed, 2015-03-25 at 22:56 -0500, Phillip Hallam-Baker wrote:
Web of Trust is a fine academic
theory but it is not how OpenPGP is really used in the real world.
How else do you use it?
The lesson here that I draw is to look at how people are actually
using OpenPGP in practice and work out ways to apply the same approach
to other similar problems.
Well if your goal is to drop the WoT respectively simply let people
download stuff from a (secured or not) keyserver believing whatever
comes and hoping the best,... then better call it something else
(InsecurePGP?) and leave OpenPGP as is.
Description: S/MIME cryptographic signature
openpgp mailing list