{"id":1242,"date":"2017-02-22T22:07:56","date_gmt":"2017-02-23T05:07:56","guid":{"rendered":"http:\/\/jaredrobinson.com\/blog\/?p=1242"},"modified":"2017-02-22T22:07:56","modified_gmt":"2017-02-23T05:07:56","slug":"pgp-trust-model-doesnt-work","status":"publish","type":"post","link":"https:\/\/jaredrobinson.com\/blog\/pgp-trust-model-doesnt-work\/","title":{"rendered":"PGP trust model doesn&#8217;t work"},"content":{"rendered":"<p>It&#8217;s been several years since I used GPG to PGP-sign and encrypt and to verify the authenticity of PGP-signed email messages.<\/p>\n<p>So it was interesting to read why the PGP trust model doesn&#8217;t improve security:<\/p>\n<p><a href=\"http:\/\/arstechnica.com\/security\/2016\/12\/op-ed-im-giving-up-on-pgp\/\">http:\/\/arstechnica.com\/security\/2016\/12\/op-ed-im-giving-up-on-pgp\/<\/a><\/p>\n<p>I believe that confidentiality isn&#8217;t a binary thing &#8212; if one desires it, one must continually stay up-to-date on what approaches work and what is economically feasible, and what is no longer effective.<\/p>\n<p>The article recommends Signal or WhatsApp for instant messaging, Magic Wormhold or OnionShare for file sharing, etc. It also recommends the use of Yubikey 4 for authentication.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s been several years since I used GPG to PGP-sign and encrypt and to verify the authenticity of PGP-signed email messages. So it was interesting to read why the PGP trust model doesn&#8217;t improve security: http:\/\/arstechnica.com\/security\/2016\/12\/op-ed-im-giving-up-on-pgp\/ I believe that confidentiality isn&#8217;t a binary thing &#8212; if one desires it, one must continually stay up-to-date on &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/jaredrobinson.com\/blog\/pgp-trust-model-doesnt-work\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;PGP trust model doesn&#8217;t work&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,17],"tags":[],"class_list":["post-1242","post","type-post","status-publish","format-standard","hentry","category-security","category-tech"],"_links":{"self":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/comments?post=1242"}],"version-history":[{"count":5,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/1242\/revisions"}],"predecessor-version":[{"id":1247,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/1242\/revisions\/1247"}],"wp:attachment":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/media?parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/categories?post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/tags?post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}