Mercury

[defdefred]

On Wednesday 24 June 2020 18:30, Felix Queißner <felix at masterq32.de> wrote:
> > Optional PGP signature is enough to provide integrity.
> It depends strongly on how you verify that PGP signature (same rules
> apply to TLS though)

The fun fact is:
- with TLS, the whole server is using only one certficat and the integrity of publication rely only on this security and you don't know if it is a compromised server.
- with PGP signature, each writer using the server have his own certificat to secure his writing integrity.

freD.