333 karma · joined February 4, 2019
It's always a battle of convinience versus security, and I get it... people think that because some services have lowered security to allow device surfing, yet without knowing the implications, that it's then just some kind of abstract non-issue taken care of by magical security things not understood. In other words it takes a big leap of faith, that was improper.
A significant portion of melodies likely to be generated by people, or put another way these are the more trivial melodies. The range of complexity is vast, so just like cracking passwords might use a dictionary attack, or use English alphabet, or similar limited scopes, so it goes here.....
PGP aligning with how email actually works and the author not liking the effects is a pity, but by comparison it's a whole other dichotomy from something like a mediated end-to-end crypto scheme. Those kind of systems have the exact oppose set of problems from PGP conceptually, and note this ignores the geriatric architecture of PGP to some extent.
Assuming PGP were re-invented right now, I'd still like it to mostly stay the same. That is to say, I'd like to be able to have private/public keys stored in something conceptually similar. I'd like to see slight ease-of-use improvement in signing objects, encrypting objects, etc... but the basic functionally be the same. Finally I'd like to see integration with other transports made more modular and around an API versioning system that moves forward. That is to say, If I sign my emails, I'd like to be able to communicate that the other end should be on an API above some level, or similar setup.
Finally, there would bee some more thought put into people who want to advertise their keys on public directories. The aforementioned API versioning and modular remarks head into this direction. People want to communicate their keys, and it should be easy for social networks, or whatever directory lookup providers that would be created can be accommodated. This is key
People like things like the signal protocol, but they want to manage all the stuff in the middle themselves, or whatever that entails. Some people may want to fly bellow the radar, and not have anything to do with an automated system, or run sneaker-nets like some old school cloak-and-dagger stuff from KGB or CIA.
Anyways, email is terrible. But to conflate the problems of email over to PGP is a bit weird, but it's nice to recognize the real issue of using both.
That is something like gravity's inverse square law, or put another ways we have been obsessing on the measured effects of gravity, but not truely understanding.... like we used to not understand air pressure centuries ago.
Anyways, it goes without saying air pressure emerges from lots of air concentrated in a space, just like gravity emerges from the presence of mass in a concentrated space.
Gravity is the air of the universe.
It's a pity the cradle of civilization turned to sand, but at the cost of Earth becoming more habitable it's a fair trade.
Let's be clear on one thing before starting, it's just a benefit for employees, just like any other kind of benefit offered, for example the aforementioned matching 401k retirement fund. Some employers have fabulous benefit packages, and that is fine. Another related topic here is how medical insurance used to be mostly about avoiding costly emergency room visits, which back in the old days would sometimes result in bankruptcy. And, that is fine, because bankruptcy has replaced debtors prison, and we maintain a civilized society, but I digress. Insurance used to be a safety net to avoid financial ruin in the event of an emergency, but somewhere along the way it morphed into an all-invasive pervasive part of medical maintenance care, I.E. yearly dental cleanings, or primary care physical exams, etc.. Consider this, Medical insurance used to be just like automotive liability insurance, it paid out when there was an expensive accident, but auto insurance does not pay for oil changes and windshield wiper fluid. Well that is kidna what happened to medical insurance, it's morphed into a pervasive maintenance plan, and at this point the maintenance aspect is what is most defining about medical insurance. Paying that small sum of money every month is super worth it when that ultra rare accident happens requiring an emergency room visit, but this same model does not apply well when it comes to maintenance, because then you get people with pre-existing conditions who are effectively uninsurable, because this is not a Hippocratic oath, it's insurance (I.E. business) for avoiding bankruptcy by way of emergency room visit.
Still, it was an interesting perspective on insurance as an employee benefit. Not sure about the foundations, but the analogies with grocery stores was amusing.