On 11 December 2015 at 13:17, Tati Chevron <chev...@swabsit.com> wrote:
> Would you really trust HTTPS more than a physical CD being mailed to > you??? Yes. Both provide some level of accountability, however with PKI you explicitly trust a limited (though big) numer of third parties to do their job properly, and in the case of a screwup, at least everyone involved is nice enough to leave their name in the certificate chain. The same can't be said for the hundreds of anonymous hands that handle my snail mail. But even if PKI were actively on fire at the moment (which it is not), what's wrong with doing both? -Thijs