Re: The future of security

2004-06-02 Thread Ben Laurie
Peter Gutmann wrote: No they won't. All the ones I've seen are some variant on the build a big wall around the Internet and only let the good guys in, which will never work because the Internet doesn't contain any definable inside and outside, only 800 million Manchurian candidates waiting to

SMTP over TLS

2004-06-02 Thread Perry E. Metzger
I view link encryption for SMTP -- i.e. SMTP over TLS -- as having two functions. 1) It frustrates vacuum cleaner mail tapping efforts to some degree. 2) It can be used effectively for authenticating the posting of a mail message from an MUA to the first hop MTA. I don't see it as being

Chalabi Reportedly Told Iran That U.S. Had Code

2004-06-02 Thread R. A. Hettinga
http://www.nytimes.com/2004/06/02/politics/02CHAL.html?th=pagewanted=printposition= The New York Times June 2, 2004 Chalabi Reportedly Told Iran That U.S. Had Code By JAMES RISEN and DAVID JOHNSTON ASHINGTON, June 1 - Ahmad Chalabi, the Iraqi leader and former ally of the Bush administration,

Article on passwords in Wired News

2004-06-02 Thread Perry E. Metzger
An article on passwords and password safety, including this neat bit: For additional security, she then pulls out a card that has 50 scratch-off codes. Jubran uses the codes, one by one, each time she logs on or performs a transaction. Her bank, Nordea PLC, automatically sends a new

Re: The future of security

2004-06-02 Thread Bill Stewart
At 05:15 AM 6/2/2004, Ben Laurie wrote: SPF will buy me one thing forever: I won't get email telling me I sent people spam and viruses. Unfortunately, that won't work for me. My email address is at pobox.com, the mail forwarding service where the main proponent of SPF works, but my SMTP service