|
|
|
|
|
by survirtual
670 days ago
|
|
Is it an oxymoron to generate an asymmetrical cryptographic signature, send it to someone, and that someone verify the signature with the public key? Why not just "trust" them instead? You have a contact and you know them, can't you trust them? This is what "trust but verify" means. It means audit everything you can. Do not really on trust alone. An entire civilization can be built with this methodology. It would be a much better one than the one we have now. |
|
Of course not. I verify because I don't trust them.
> Why not just "trust" them instead? You have a contact and you know them, can't you trust them?
No, the risk of trust is too high against the cost of spending a second verifying.
> This is what "trust but verify" means. It means audit everything you can. Do not really on trust alone.
Your comment just showed an example of something I don't trust and asked "why not trust instead"? The question even undermines your very point, because "why not trust them instead?" assumes (correctly) that I don't trust them, so I need to verify.