1994-12-01 - Re: Hazards of encouraging forged dig sigs

Header Data

From: Mark Grant <mark@unicorn.com>
To: Cypherpunks Mailing List <cypherpunks@toad.com>
Message Hash: e506dda0f7a2b36960b6c648d56af8e67bf6bf5575151bf853e3232e3ebe5eab
Message ID: <Pine.3.89.9412011226.A29304-0100000@unicorn.com>
Reply To: N/A
UTC Datetime: 1994-12-01 13:08:03 UTC
Raw Date: Thu, 1 Dec 94 05:08:03 PST

Raw message

From: Mark Grant <mark@unicorn.com>
Date: Thu, 1 Dec 94 05:08:03 PST
To: Cypherpunks Mailing List <cypherpunks@toad.com>
Subject: Re: Hazards of encouraging forged dig sigs
Message-ID: <Pine.3.89.9412011226.A29304-0100000@unicorn.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 30 Nov 1994, L. McCarthy wrote:

>Encouraging cryptographically
>valid signatures was the first suggestion I'd seen in this entire debate
>which seemed to promise tangible benefits; encouraging cryptographically
>invalid signatures is the first notion which appears to offer tangible
>detriment.

As one of the few people who verify all PGP signatures for which I have 
keys, I have to say that encouraging people to put garbage in PGP 
signature blocks would be extremely annoying. Either I'll have to go back 
to using a non-PGP-aware mail reader, or fix it to do something sensible 
with such messages. While I'm going to have to do the latter at some point
anyway, there are much more useful things that I could be doing...

			Mark


-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAgUBLt3Kw6FlWzerDvH1AQEyTgP/bPz1NLXeicLD81Ijj8S6/m+D3Tmb363Q
+Xj5MDsW+xBNC+p8ViKzZ+zvjZg5Cr6MsQ24TWT3n7DId7l2pAWyAH5JWf7OuW9u
xvrfMfFas04RuOE8mjO7Gcp9E3eFNKz9MNQGlG7YwkPLX/twbF7+gX1RWkPGV2JE
+b+KOjVkQbs=
=lLbP
-----END PGP SIGNATURE-----







Thread