Hi Derek, On Mon, May 13, 2024 at 10:10:50AM GMT, Derek Martin wrote: > On Fri, May 10, 2024 at 02:16:12AM +0200, Eike Rathke wrote: > > If you can't trust but need to, then verify. The fingerprint over > > a trusted channel. This has been part of PGP since the beginning. > > Indeed, but that's what I've been saying. The use of autocrypt (or > similar features) downplays the need for this, and encourages naive > users to skip this important step.
Just to clarify, the feature I'm proposing was designed by autocrypt people (in parallel to me), but is orthogonal to it. It's not related at all, and doesn't encourage skipping this important step. I'm myself not an autocrypt user, and agree with you on that. Have a lovely day! Alex -- <https://www.alejandro-colomar.es/>
signature.asc
Description: PGP signature
