[coldtea]

>PKI works. Period. I don't understand how knowledgeable engineers complain about PKI being "too complex". The same people complain that SMTP, DNS and NTP is too difficult too

Perhaps as knowledgeable engineers they can understand accidental complexity when they see it.

[therealdrag0]

OTOH it's easy to dismiss something as overly complex before you understand it yourself.

[coldtea]

It's even easier to build something that's more complex than needed, because of original bad design or accumulated cruft.

[therealdrag0]

Definitely agree. Devs are often too comfortable with their first design instead of iterating and simplifying.