Intro & observations

[Bryan J. Smith]

Davidson Rodrigues Paulo <davidsonpaulo at gmail.com> wrote:
> Hey, I'm absolutely not sugesting to modify security policy,
> I hope you have understood it. I'm talking about an *altervative*
> method to generate PGP/SSH keys and sign files in a way they can
> be recognized by Fedora Account System engine. Because, today,
> there no one information about using a GUI to generate PGP/SSH
> keys.

That's typically because there is no "Point'n Click" 'process.'  Yes,
there are key managers and other GUI solutions, but the "process"
(including the concepts of "Public Key" authentication in general) is
what most people take issue with.  ;) 

> I said if you think that command line is better you can't
> say to others they can't use a GUI, as well as anyone who
> think that using a GUI is better can't say to others they
> can't use command line.

If you have a GUI that "does the job," go for it.  In fact, I guess
we could use a "wizard" that has major "hand holding."  God knows I'd
love to write such a key manager that does.  But I haven't seen one
myself.  ;)

I.e., I found the commercial PGP GUI software is "too hard to use" by
97% of users, not because of the software or GUI, but because of the
concepts beyond PKI.

> Yes, I know it. I use CLI every day, every time because at most
> cases giving commands allows me to do tasks in a faster way than
> using GUI's. But this is not the issue.

But the "processes" are the issue.  I don't know how you avoid them
in a GUI, at least without a Wizard that is also an educator.

The ultimate irony is that most people say, "I just want it to work"
and don't stop to realize part of the "process" *IS* to understand
*WHY* you don't "just want it to work."  I.e., what protections and
processes you must proliferate, not, for example ...

  "okay, I got a key, not sure which one you need so
   I'll upload both of them to you."  ;)

[ Oh man, that happens *WAY* too much! ]

> Yes, it's right. I never said Fedora need to avoid using CLI
> interfaces on its CLA process. Again, this is not the issue.

I know, but the "process" is what people complain about, not the GUI.
 ;)




-- 
Bryan J. Smith   Professional, Technical Annoyance
b.j.smith at ieee.org    http://thebs413.blogspot.com
--------------------------------------------------
     Fission Power:  An Inconvenient Solution