From: The Deviant <deviant@pooh-corner.com>
Date: Tue, 17 Sep 1996 13:54:09 +0800
To: "David K. Merriman" <merriman@amaonline.com>
Subject: Re: Snake Oil FAQ 0.4 [comments appreciated]
In-Reply-To: <199609161705.KAA26825@toad.com>
Message-ID: <Pine.LNX.3.94.960916220357.8583B-100000@anx0918.slip.appstate.edu>
MIME-Version: 1.0
Content-Type: text/plain


On Mon, 16 Sep 1996, David K. Merriman wrote:

> Date: Mon, 16 Sep 1996 10:05:27 -0700 (PDT)
> From: "David K. Merriman" <merriman@amaonline.com>
> To: cypherpunks@toad.com
> Subject: Re: Snake Oil FAQ 0.4 [comments appreciated]
> 
> To: cypherpunks@toad.com
> Date: Mon Sep 16 12:05:17 1996

[usefull stuff rm'd]

> >
> >       The phrase easy-to-use should not appear in proximity to one
> > time pad, except in the context 'Easier key management than a one time
> > pad!"
> >
> 
> I would also suggest that the generation of OTP 'pads' for users is
> *highly* questionable. Who else is getting a copy of them, assuming they're
> even valid?
> 

Not to mention, the basic flaw of OTP.. if you have the only copy of the
key, and the key is non-repetitive, how do you send the key to another
person without being just as insecure as not encrypting it in the first
place... almost any OTP claims are gonna be snake oil.

 --Deviant
"I understand by 'freedom of Spirit' something quite definite -
the unconditional will to say No, where it is dangerous to say
No.
           Friedrich Nietzsche