Maybe learning pgp should be more encouraged on the marketplace with a direct link to a dummy instruction both on the message system and when inserting address after ordering?
Some creative thinking on handling the issue/fact that many customers who just want to score drugs don't even now what pgp are.
What should be mandatory thou is a pgp key from vendors.
I'm sorry, I think there's been enough pussyfooting around. The rule needs to be simple: if you want to do business here, you encrypt. If you don't want to encrypt, you don't do business here.
I remember DPR1 & DPR2... and how they clung to their Libertarian ideals... they didn't want to
force anyone to learn to use encryption -- it should be voluntary. Only those big old nasty state entities ever forced people to do things, and we don't wanna be like them. So, they remained true to their ideals, and look where it got them. I'd bet my last currency unit that, when the Feds finally got their hands on the server data, that they practically fell over laughing at these fucking fools, whose unrealistic policies led to the vast bulk of the data being in the clear.
I'll bet even the FBI were surprised (not to mention pleased) at just how much of it was unencrypted. I'll bet they simply could not believe their luck!
What in the name of God is it going to take to get those in authority here to realize that voluntary approaches simply DO NOT WORK!? Even after the bust in October, when it was revealed that the server was seized, with reams of unencrypted data on it, we still see less than a 50% adoption of encryption. Sure, that's an improvement over the 10-20% adoption on the original, but it's still no where near acceptable.
It may offend some people's Libertarian sensibilities, but sometimes PEOPLE HAVE TO BE FORCED TO TO DO THE RIGHT THING.
Nightcrawler
4096R/BBF7433B 2012-09-22 Nightcrawler <Nightcrawler@SR>
PGP Key Fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
Security is a bit like religion... some things have to be taken on faith.
Where security differs from religion is that security is NOT retroactive.
Unlike Christianity, where you can come to Jesus, be 'saved' and have all
your sins washed away, with security you can adopt Tails or PGP, and be
secure from that point forward, but rest assured that your previous sins
(security failings) WILL come back to haunt you and bite you in the ass.
The original DPR is the poster child for that, right now.
Folly, thou conquerest, and I must yield!
Against stupidity the very gods Themselves
contend in vain. --Friedrich Schiller
