[cap-talk] More Heresey: ACLs not inherently bad

[Raoul Duke]

> Skype IM is almost as easy to use as unencrypted IM, SSH is slightly
> trickier than telnet, but the difference is scarcely noticeable.
> Skype and SSH demonstrate that encryption, done right, can be easy to
> use.

i haven't used Skype IM, but ssh is truly a wonderful thing (unless
you were on Debian, etc. ha ha oh boy, or as if the NSA hasn't long
ago cracked it all or something oh well).

tho, different humans have different willingness to deal with
usability hurdles in the name of security. for example, probably
mostly nobody really ever bothers to validate ssh fingerprints the
first time they connect to a server. and if you cf. other studies gave
a Regular Joe user a candybar i'm sure they'd be willing to ignore
fingerprint change alerts when "i just want to read my email right
now!"

but it is truly nice & good that there are existence proofs of
improving the security + user experience together; Cap Desk, Skype IM,
ssh could be poster children of optimism.

sincerely.