25 Jun
2013
25 Jun
'13
4:19 a.m.
On Mon, Jun 24, 2013 at 9:59 PM, Christopher Morrow <morrowc.lists@gmail.com> wrote:
it's fair to say, I think, that if you want to say something on the network it's best that you consider: 1) is the communication something private between you and another party(s) 2) is the communication going to be seen by other than you + the-right-other-party(s)
and probably assume 2 is always going to be the case... So, if 1) is true then make some way to keep it private: ssl + checking certs 'properly' (where is dane?) gpg + good key material security private-key/shared-key - don't do this, everyone screws this up.
SSH + SSHFP + DNSSEC does public/private key pretty well