Re: I'll show you mine if you show me, er, mine

2005-02-24 Thread Hal Finney
back and forth (typically 2048 bits each) for every bit of your password. I'll bet the actual paper has a much more clever scheme which improves the efficiency and has a nice proof of security. I'm looking forward to seeing it. Hal Finney

Re: Off-the-Record Messaging (IM plugin)

2004-12-16 Thread Hal Finney
Nikita Borisov and Ian Goldberg have released Off-the-Record Messaging (http://www.xelerance.com/mirror/otr/), It looks like Ian Goldberg's site might be a more authoritative source, http://www.cypherpunks.ca/otr/ . One interesting feature is authentication + deniability. You know who you are

Re: Your source code, for sale

2004-11-08 Thread Hal Finney
Ben Laurie writes: How do you make the payment already gone without using a third party? Of course there has to be a third party in the form of the currency issuer. If it is someone like e-gold, they could do as I suggested and add a feature where the buyer could transfer funds irrevocably into

Re: Your source code, for sale

2004-11-05 Thread Hal Finney
Enzo Michelangeli writes: In the world of international trade, where mutual distrust between buyer and seller is often the rule and there is no central authority to enforce the law, this is traditionally achieved by interposing not less than three trusted third parties: the shipping line, the

RE: Your source code, for sale

2004-11-04 Thread Hal Finney
Tyler Durden writes: So my newbie-style question is, is there an eGold that can be verified, but not accessed, until a 'release' code is sent? In other words, say I'm buying some hacker-ed code and pay in egold. I don't want them to be able to 'cash' the gold until I have the code.

Re: Federal program to monitor everyone on the road

2004-10-01 Thread Hal Finney
There was a brief mention of this technology at the Crypto conference. I provided some pointers in a comment to an Ed Felten blog entry at http://www.freedom-to-tinker.com/archives/000677.html#comments (scroll down to the 3rd comment). Dan Boneh et al presented a proposal for a group signature

Re: potential new IETF WG on anonymous IPSec

2004-09-09 Thread Hal Finney
secrets or CAs. I don't think anonymous is the right word for this, and I hope the IETF comes up with a better one as they go forward. Hal Finney

Seth Schoen's Hard to Verify Signatures

2004-09-08 Thread Hal Finney
the signature under different keys and see which one worked. Hal Finney

Re: Remailers an unsolveable paradox?

2004-09-01 Thread Hal Finney
Spam is the least of the problems for remailers when it comes to abuse. You should be more concerned about possible liability for illegal messages. In a way, spam has actually made the remailer operator's life easier as people today are used to receiving annoying and obscene email. Ten years

RPOW - Reusable Proofs of Work

2004-08-15 Thread Hal Finney
will invalidate any RPOW tokens which people have previously created. So don't go too crazy hoarding up RPOWs quite yet. Thanks very much - Hal Finney

Re: Email tapping by ISPs, forwarder addresses, and crypto proxies

2004-07-07 Thread Hal Finney
the threat from the ISP to another operator. The difference I suppose is that the forwarder would be selling privacy services, hence different ones would compete to get a good reputation. Any cheating might be detected by insider whistle blowers or perhaps some kind of audit. Hal Finney