Thread

1. bzmrgonz · 1789618128 · focus · HN ↗

   It baffles that people think it's a bad thing to disclose a public key. That's their purpose actually. Sure we now have the post quantum computer threat, and some state actors are harvesting keys, but quantum computer is going to disrupt so much, that Id verification won't even matter really.

   1. morsch · 1789623646 · focus · HN ↗

      Think about it, the key analogy is just terrible. In the origin domain, losing a key is always bad, and making a key available to all is a non sequitur.

      It's not like non-technical people understand asymmetric cryptography. Or even technical people, for that matter.

      Maybe we should refer to the public key as an address, and the private key is just a password again. You can send stuff, securely, to an address. And you can verify the sender when you have their address (ie check the signature).

      1. VorpalWay · 1789649547 · focus · HN ↗

         An alternative way to think about it would be a padlock and a key. Anyone can close the padlock (assuming the common spring loaded design), but only the key holder can open it.

         While this works for encryption, it doesn't really work for explaining signatures or however. Maybe someone can come up with a good analogy for that case.

         1. TeMPOraL · 1789660399 · focus · HN ↗

            Certificate and signature could work as an analogy for public keys, if they weren't already taken by higher level concepts.

Unofficial Hacker News client; not affiliated with Y Combinator.