why pgp sucks

Hal hfinney at shell.portal.com
Fri Feb 10 12:32:05 PST 1995


"Perry E. Metzger" <perry at imsi.com> writes:
>I'll also note, yet again, that unless PGP quits this bad practice of
>identifying counterparties only by a number, it is NOT going to be
>universally deployed. Counterparties need to be identified by a name
>that can be looked up in the DNS -- meaning "joe at foo.com" rather than
>some key ident number.

PGP of course looks up keys by strings in addition to numbers.  A widely
accepted practice is to use <joe at foo.com> in the user ID which allows the
lookups to be by internet address.  PGP was intended for use beyond the
internet, such as in bbs's, fidonet, corporate networks, etc., where DNS
style addresses may not be useful.

Hal






More information about the cypherpunks-legacy mailing list