On 01/12/2011 12:10 PM, Hauke Laging wrote: > I mean: It is POSSIBLE to steal my secret key but it is not EASY. For normal > email communication I regard this as enough. For signing treaties or other > keys I use other keys (and a different environment).
yes, that's true; but here we've been talking about attacks that don't
require stealing of the key (e.g. taking a signed message and placing it
in another context). if you sign context-dependent messages as a matter
of course, then it's trivial for me to replay one of those messages and
have it imply an entirely different meaning. Is this a desirable outcome?
--dkg
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
