Hacker News Reader

I'm a computer security researcher. At some point I posted a public key for people to send me encrypted email. Nobody ever did and at some point I lost that private key.

Point is, key management is hard problem for big corporations with dedicated IT staff. Relying on normal people to be able to do that is just insane.

View on HN

I'll give another example. My medical practice tried to do GPG encryption in a shared DropBox folder. Within the first week, someone decrypted half the files into the same shared folder...

It was all just a test with non-critical data, but the test was a total failure. And that didn't even get into key-related issues.

Reply on news.ycombinator.com