Generic rant against ‘security’

Ok, this is me too, but at least I listen to myself… most of the time.
firstly, listen to the user. If they repeat something more than once then it probably means that they want to ignore that particular thing all the time. Let’s be honest, when my mail host sends me the same certificate for the umpteenth time, you’re likely to guess the answer based on the last 200000000 times I clicked Yes.
Oh, no you disclaim! this is security! people need to be saved from their stupidity.
The problem is that the current ‘security’ and ‘authenticity’ system is supported by money.
I can pay someone enough money and they will probably claim that I’m the first bank of owning all your children – and because of the trust system, you won’t be able to disavow that claim. After all I paid my $200 to get that claim.
The entire system of trust on the internet is based on a first-come-first-served monopoly of ‘I trust you’ mechanisms. This is simple, but ultimately a poor trust mechanism.
The solution probably involves a complex series of gpg keys, but ultimately it would be more satisfactory because:

• It does not involve money
• trust can be reduced as well as increased

This rant was brought to you by shredder aka thunderbird 3 – after all you are too stupid to manage your own email; even though you just want a secure channel between you and the email server.