| From: D. Hugh Redelmeier <[EMAIL PROTECTED]> | It turns out that encryption is easy but authentication is hard.
I forgot to mention traffic analysis. This is a very powerful tool and difficult or expensive to protect against. The "pen register" stuff is all about traffic analysis. To avoid traffic analysis while communicating: - use covert channels - hide your real traffic within bogus traffic (must be indistinguishable). Requires a lot of traffic so this tends to be expensive. - hide your traffic within a cloud of other traffic (must be indistinguishable). This suggests aggregation but aggregation tends to work against the end-to-end security I prefer. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
