RE: NAI pulls out the DMCA stick

2002-05-24 Thread Peter Gutmann
contrary [EMAIL PROTECTED] writes: As long as you obtain your S/MIME certificate from an apporved CA, using an approved payment method and appropriate identification. The only CA-issued certs I've ever used were free, and under a bogus name. Usually I just issue my own. You really need to

RE: NAI pulls out the DMCA stick

2002-05-24 Thread Peter Gutmann
Curt Smith [EMAIL PROTECTED] writes: Certificate Authorities issue certificates complete with CA imposed expiration dates and usage limitations. (I prefer independent systems with unrestricted certificates) So issue your own. Honestly, why would anyone want to *pay* some random CA for this?

Re: Joe Sixpack doesn't run Linux

2002-05-24 Thread Peter Gutmann
Meyer Wolfsheim [EMAIL PROTECTED] writes: S/MIME support is in just about every popular email client out of the box. Why is PGP more widely used? [Good reasons snipped] Those who care about security [0] use PGP, the rest use S/MIME. To steal a line from Hexed: S/MIME: For people who could

Mersenne Twister

2002-05-24 Thread gfgs pedo
hi, Does any 1 have a reference to the actual Mersenne Twister algorithm? Thank u. Regards Data. __ Do You Yahoo!? LAUNCH - Your Yahoo! Music Experience http://launch.yahoo.com

Re: Open-Source Fight Flares At Pentagon Microsoft Lobbies Hard Against Free Software

2002-05-24 Thread David Howe
Microsoft also said open-source software is inherently less secure because the code is available for the world to examine for flaws, making it possible for hackers or criminals to exploit them. Proprietary software, the company argued, is more secure because of its closed nature. Presumably the

RE: NAI pulls out the DMCA stick

2002-05-24 Thread contrary
On Fri, 24 May 2002 17:13:18 +1200 (NZST), Peter Gutmann [EMAIL PROTECTED] said: contrary [EMAIL PROTECTED] writes: As long as you obtain your S/MIME certificate from an apporved CA, using an approved payment method and appropriate identification. The only CA-issued certs I've ever

Re: Mersenne Twister

2002-05-24 Thread Mike Rosing
On Fri, 24 May 2002, gfgs pedo wrote: hi, Does any 1 have a reference to the actual Mersenne Twister algorithm? Thank u. I've got code posted on the authors web page. Do a web search of Mersenne Twister and you'll get there eventually. Patience, persistence, truth, Dr. mike

MPAA wants all A/D converters to implement copyright protection.

2002-05-24 Thread Trei, Peter
My mind has been boggled, my flabbers have been ghasted. In the name of protecting their business model, the MPAA proposes that every analog/digital (A/D) converter - one of the most basic of chips - be required to check for US government mandated copyright flags. Quite aside from increasing

RE: NAI pulls out the DMCA stick

2002-05-24 Thread jamesd
-- On 23 May 2002 at 0:24, Lucky Green wrote: Tell me about it. PGP, GPG, and all its variants need to die before S/MIME will be able to break into the Open Source community, thus removing the last, but persistent, block to an instant increase in number of potential users of secure email

Re: Government subsidies: our last, best hope for Cryptanarchy?

2002-05-24 Thread Morlock Elloi
You may be asking yourself: where, oh where, has all the crypto gone? Presuming question, as the rest of the article. Crypto is there for all those who want to encrypt, accessible as it was five years ago. And stuff does get encrypted - the real crypto, P2P, not the bogus one between servers

Re: MPAA wants all A/D converters to implement copyright protection.

2002-05-24 Thread Mike Rosing
On Fri, 24 May 2002, Trei, Peter wrote: My mind has been boggled, my flabbers have been ghasted. Yes. It is not really possible to put into words just how insane this is is it? I'm gonna try to sit down with a senator's aide who's working on this as soon as possible, I think the guys from

Re: Joe Sixpack doesn't run Linux

2002-05-24 Thread Curt Smith
The lack of e-mail detailing financial transactions is also the reason many businesses chose not to incur the overhead of secure communications. If there were servers on the internet which automatically displayed all plaintext e-mail messages which passed through them as webpages (for the bored,

Re: Joe Sixpack doesn't run Linux

2002-05-24 Thread jamesd
-- On 23 May 2002 at 10:57, Meyer Wolfsheim wrote: 3. The people who might use it if it is easy. This is Joe Sixpack. This is who you are worrying about, wanting S/MIME to deliver on its promises. This is Templeton is worrying about, wanting opportunistic mail encryption. Joe sixpack

Re: why OpenPGP is preferable to S/MIME (Re: NAI pulls out the DMCA stick)

2002-05-24 Thread jamesd
-- On 23 May 2002 at 21:58, Adam Back wrote: This won't achieve the desired effect because it will just destroy the S/MIME trust mechanism. S/MIME is based on the assumption that all CAs are trustworthy. Anyone can forge any identity for clients with that key installed. S/MIME isn't

Re: NAI pulls out the DMCA stick

2002-05-24 Thread Eric Murray
On Fri, May 24, 2002 at 12:07:48PM -0700, Curt Smith wrote: While we are on the subject of issuing your own X.509 certificates: 1. How do you create a X.509 signing hierarchy? Do a web search on openssl certificate authority. 2. Can you add additional algorithms (ie. Twofish)? Yes, if

Re: Joe Sixpack doesn't run Linux

2002-05-24 Thread Major Variola (ret)
At 12:21 PM 5/24/02 -0700, Curt Smith wrote: If there were servers on the internet which automatically displayed all plaintext e-mail messages which passed through them as webpages (for the bored, curious, and opportunistic), THEN everyone would see the value of encrypted e-mail. Hmm, didn't

S/MIME and web of trust (was Re: NAI pulls out the DMCA stick)

2002-05-24 Thread Eric Murray
On Fri, May 24, 2002 at 11:17:08AM -0700, [EMAIL PROTECTED] wrote: -- On 23 May 2002 at 0:24, Lucky Green wrote: Tell me about it. PGP, GPG, and all its variants need to die before S/MIME will be able to break into the Open Source community, thus removing the last, but persistent,