Hacker News: shinigami

New comment by shinigami in "Haiti’s President Is Assassinated"

shinigami — Thu, 08 Jul 2021 16:20:36 +0000

What monumental cowardice. The "high ideological rhetoric" is something not even mildly "ideological". And then it's their fault that the shitty dudebros of HN had a fit?

Please ban me from the orange hellsite so that I'm never tempted on commenting something ever again, while you reflect on why you're defending such garbage people

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Thu, 19 Nov 2020 00:14:19 +0000

> The layperson doesn't have to understand the intricacies of email protocols, it's enough that they consider email to be non-repudiable.

They consider it non-repudiable not because of DKIM, it's just a common misconception. People believed that before DKIM. They will still believe it if Google discloses its DKIM keys.

They totally should not believe it, though.

> So if I can't give the exact number of times that DKIM has helped in dispute resolution, then my argument "has zero basis in reality"?

Of course that's not what I meant, I don't care about exact numbers. Just give me some evidence that DKIM is relevant to solve disputes anywhere else other than in the minds of HN commenters. Otherwise your claim that the world is better off now with non-repudiable email has no basis in reality.

> they are choosing non-repudiation over privacy

They totally are not. They have no idea what are the properties of email. As an example, a non-tech friend of mine was once surprised that email does not provide any confidentiality.

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Wed, 18 Nov 2020 16:10:55 +0000

> The only reason why laypersons consider email to be non-repudiable is because of additional protocols like SPF and DKIM that were implemented after the original spec

You really think that laypersons have any idea of what DKIM is?

> But the world would be worse off, not better.

That's the whole point of this discussion. You seem to be arguing that the world would be better with non-repudiable email. But then I ask how many disputes have been resolved with DKIM and you have no idea. So basically your argument has zero basis in reality.

You're asking for every email user to have non-repudiation enforced unwillingly to them in every email they send so that someone maybe someday may solve some imaginary dispute with Amazon by using DKIM.

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Wed, 18 Nov 2020 12:07:42 +0000

You do realize that email is older than DKIM? And that commerce existed before emails? You don't need DKIM to solve the issues you've pointed out.

Again: How many disputes like that have been resolved with DKIM?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Wed, 18 Nov 2020 01:31:59 +0000

You can dispute that without DKIM.

How many disputes like that have been resolved with DKIM?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Tue, 17 Nov 2020 17:10:26 +0000

You didn't answer it. In which scenario Amazon would deny sending an email and you would be protected by DKIM?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Tue, 17 Nov 2020 12:27:29 +0000

Then digitally sign it. Sign and scan it. Do not require signing every single email you send to protect 0,1% of them.

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Tue, 17 Nov 2020 12:26:17 +0000

Why do you need Amazon to digitally sign a contract?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Tue, 17 Nov 2020 02:47:40 +0000

So maybe digitally sign the contracts instead of unwillingly sign every single email you send?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 21:09:49 +0000

Sure. So why do we need DKIM to authenticate contracts?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 21:08:19 +0000

I meant: authenticating a contract via email. I guess you sign and scan them?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 21:07:22 +0000

Sure. But what authenticates the contract? Do you sign and scan them?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 21:06:36 +0000

So... no need for DKIM

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 21:06:13 +0000

It's still a terrible idea...

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 19:22:56 +0000

We could catch a lot of criminals if we every OS had a backdoor that the police could access. So, are you in favor of that?

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 19:20:05 +0000

Good luck arguing that Gmail forged and signed an email from you.

New comment by shinigami in "Ok Google: please publish your DKIM secret keys"

shinigami — Mon, 16 Nov 2020 19:14:13 +0000

Entering an contract via an email is a ridiculous idea from the start.

New comment by shinigami in "I Am Deleting the Blog"

shinigami — Tue, 23 Jun 2020 12:01:41 +0000

Exactly, downvotes hurt so much!

New comment by shinigami in "GnuTLS: TLS 1.3 session resumption works without master key, allowing MITM"

shinigami — Tue, 09 Jun 2020 11:38:26 +0000

It's the opposite, really. It improved a lot after the heartbleed issue.

New comment by shinigami in "Cofactor Explained: Clearing Elliptic Curves' dirty little secret"

shinigami — Thu, 09 Apr 2020 18:36:28 +0000

If one implements ECDSA, but does not follow SECG, one is also doing it wrong on multiple levels. Yet here we are.