Re: Crypto and UI issues

2005-12-16 Thread James A. Donald
-- From: Ben Laurie <[EMAIL PROTECTED]> > if the key changes in OpenSSH you can't connect until > you take positive action by deleting the old key from > the known_hosts file. This is totally different to > accepting a new key. > > I will agree that something better than ju

Re: X.509 / PKI, PGP, and IBE Secure Email Technologies

2005-12-16 Thread Ed Gerck
James A. Donald wrote: -- From: Werner Koch <[EMAIL PROTECTED]> You need to clarify the trust model. The OpenPGP standard does not define any trust model at all. The standard merely defines fatures useful to implement a trust model. "Clarifying the trust model" sounds s

Re: crypto for the average programmer

2005-12-16 Thread Ben Laurie
[EMAIL PROTECTED] wrote: > | > | > My question is, what is the layperson supposed to do, if they must > use > | > | > crypto and can't use an off-the-shelf product? > | > | > | > | When would that be the case? > | > | > | > | The only defensible situations I can think of in which a > | > | non-cr

Re: Crypto and UI issues

2005-12-16 Thread Ben Laurie
David Mercer wrote: >>>Horrible, horrible UI, and I'm not sure what's worse, that or trying >>>to USE pgp (gpg, whatever) from a command line, or getting it >>>integrated into a gui mail client. >> >>Two words: Thunderbird, enigmail. > > > Sorry, I've become totally addicted to gmail and just can

Re: Crypto and UI issues

2005-12-16 Thread David Mercer
On 12/15/05, Ben Laurie <[EMAIL PROTECTED]> wrote: > David Mercer wrote: > Thanks for the apology, but ... ssh is not my fault. Sorry, crosswired openssl and openssh in my brain! > I will agree that something better than just showing you the key would > be cool. Like maybe it could be signed by s

Re: Crypto and UI issues

2005-12-16 Thread Ben Laurie
David Mercer wrote: > And my appologies to Ben Laurie and friends, but why after all these > years is the UI interaction in ssh almost exactly the same when > accepting a key for the first time as overriding using a different one > when it changed on the other end, whether from mitm or just a > key

[Clips] Bush Secretly Lifted Some Limits on Spying in U.S. After 9/11, Officials Say

2005-12-16 Thread R. A. Hettinga
--- begin forwarded text Delivered-To: [EMAIL PROTECTED] Date: Fri, 16 Dec 2005 00:10:31 -0500 To: Philodox Clips List <[EMAIL PROTECTED]> From: "R. A. Hettinga" <[EMAIL PROTECTED]> Subject: [Clips] Bush Secretly Lifted Some Limits on Spying in U.S. After 9/11, Officials Say Reply-To: [E

Re: How security could benefit from high volume spam

2005-12-16 Thread Joe Cooley
> > Maybe in near future the advantages of that noise produced by millions > of bots will outweigh the disadvantages? > > > Comments are welcome. > The noise must be made by us, the people, and directed towards leaders and industry. Technology solutions will not fix the fundamental problems. Joe

Re: Looking for fast KASUMI implementation

2005-12-16 Thread Jack Lloyd
Define fast - KASUMI is based heavily on MISTY1. In fact, during a fast scan of the KASUMI spec, I couldn't see anywhere obvious where it different from MISTY1 at all. As far as I know, I'm the only person who has even tried writing fast code for MISTY1, and the result is quite dog-slow compared t

Re: X.509 / PKI, PGP, and IBE Secure Email Technologies

2005-12-16 Thread James A. Donald
-- From: Werner Koch <[EMAIL PROTECTED]> > You need to clarify the trust model. The OpenPGP > standard does not define any trust model at all. The > standard merely defines fatures useful to implement a > trust model. "Clarifying the trust model" sounds suspiciously like de

Re: automatic toll collection, was Japan Puts Its Money on E-Cash

2005-12-16 Thread Peter Clay
On Thu, Dec 15, 2005 at 04:31:36AM -, John Levine wrote: > An article in Wikipedia says that congestion tolls in London (UK) are > also collected automatically by taking pictures of license plates. Yes, the London congestion charge. There were some horror stories about trouble with the ANPR* t

Re: crypto for the average programmer

2005-12-16 Thread Ben Laurie
[EMAIL PROTECTED] wrote: > On Mon, 12 Dec 2005, Steve Furlong wrote: > | > My question is, what is the layperson supposed to do, if they must use > | > crypto and can't use an off-the-shelf product? > | > | When would that be the case? > | > | The only defensible situations I can think of in whic

Re: automatic toll collection, was Japan Puts Its Money on E-Cash

2005-12-16 Thread Eugen Leitl
On Thu, Dec 15, 2005 at 04:31:36AM -, John Levine wrote: > An article in Wikipedia says that congestion tolls in London (UK) are > also collected automatically by taking pictures of license plates. The German TollCollect system (used on the national highway system) reads license plates of eve