Hacker News Reader

To be fair, "properly operationalised" anything is probably secure, or sensibly degrades when the axioms are up.

I think the question is, "what is the cost of properly operationalising" it. TFA mentions frequent manual rekeying as a poor man's PFS. Life is too short for that.

(I knew this discussion would summon you like a ghost of crypto past).

View on HN

Right, but I'm trying to ask a more interesting question. What are actual real-world security problems where you're comfortable using PGP, and what are some problems where that's not enough for you? As someone else on the thread alluded to: what's missing from a lot of discussion of PGP is "what are you using it for". "Secure email" can't be the answer; what exactly are you emailing?

Answering that on HN is the final operational security failure listed in the article.

Reply on news.ycombinator.com