On Tue, 5 Apr 2005 21:38:51 +0200, David Schmitt <[EMAIL PROTECTED]> said:
> On Tuesday 05 April 2005 19:29, Manoj Srivastava wrote: >> On Mon, 4 Apr 2005 10:18:26 +0100, Matthew Garrett >> [EMAIL PROTECTED]> said: >> > If I sign three votes over the course of a day and then send them >> > in reverse order, will the votes that were signed earlier be >> > accepted even if they were sent later? >> >> Sure. As far as devotee is concerned, the ordering when the ballots >> were received is the only one that matters. Since email ordering >> is not guaranteed, you may wish to wait for devotee's ack is you >> are firing off multiple ballots. > So any signed vote made public can be used to override any later > decision by the voter in question by replaying the publicised mail > and signature. No, that would be stupid. This is why we have a guard against replay attacks. manoj -- "Rage, rage, against the dying of the light!" Dylan Thomas Manoj Srivastava <[EMAIL PROTECTED]> <http://www.debian.org/%7Esrivasta/> 1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]