Re: [openpgp] Mining protection in fingerprint schemes

On Apr 8, 2016, at 11:35 PM, Daniel Kahn Gillmor 
<dkg(_at_)fifthhorseman(_dot_)net> wrote:
> So please, by all means, help people solve the "directory lookup" and
> "in-person key exchange" use cases in user-friendly ways that do not
> involve fingerprints.  But unless the WG is convinced that those
> solutions can completely replace the fingerprint everywhere, we'll still
> need to decide how to compute and structure the fingerprint.
+1.  I love user-friendly interactive key-verification mechanisms for the 
use-cases they apply to, and worked on them as part of my PhD for example.  But 
until they’re so usable and ubiquitously-deployed that no one needs to put 
their PGP key fingerprint on their business card or web site anymore, we still 
need to care at least a little bit about fingerprints that can be put on 
business cards and websites.

B

smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp