@eff Serious question: What are businesses supposed to do? Secrets are hard to keep in large organizations, and they need to authenticate between organizations.
Notices by Loren Kohnfelder (lmk@infosec.exchange)
-
Loren Kohnfelder (lmk@infosec.exchange)'s status on Wednesday, 07-Feb-2024 12:23:17 UTC Loren Kohnfelder -
Loren Kohnfelder (lmk@infosec.exchange)'s status on Wednesday, 07-Feb-2024 12:23:15 UTC Loren Kohnfelder @mcv @eff We've had PGP and SMIME email for ages but hardly anyone bothers...
Since it takes both parties it's blocked by chicken-and-egg problems getting started.
Kind of amazing that it has come to this and still nobody is very serious about solidly authenticating million-dollar scale transactions.