gatorcode
Joined 8 years ago
Joined 8 years ago
So, at best case we have some proof that our key is created/controlled by “me” via a trusted channel but not a centralized authority. Do I upload a video of me showing my public key to the world and upload to some hosting site? Could a deep fake me do that too? Then of course the gpg web of trust model comes to mind, if we attend key signing parties and sign each other’s keys we can verify through associative trust vs centralized trust.
Or is really the point to not have a real world to key identity linkage at all, for “privacy reasons,” and we just all do our business online with full anonymity?
I don’t know about Android, but in iOS you can see if you have enabled access to contacts. It’s also totally feasible your contact info is in their phone and they enabled it (email address).
Sarcasm aside, how do we propose they determine what is truth? If we assume the internet is full of information and more truthful than not, then Google’s assumption could be accurate. Of course they do try and solve this with the knowledge graph and expert curation. Connections to verified information might give validity to that information, but not always.
If you are using it to learn it’s not a bad tool to learn unless you have some pet projects you want to try out on the platform of your choice.
I’ve been working with AWS for the last 6 years and have been certified for the last 5. I learned new things through certification, but my practical experience tells me where the sharp edges are.
When you do #3 enough your management will appreciate you using existing resources, providing the trade-offs, and you will also up skill that person.