Re: [ilugd] Mail authentication

2008-09-11 Thread Raj Mathur
On Thursday 11 Sep 2008, Anupam Jain wrote: On Thu, Sep 11, 2008 at 10:31 AM, Raj Mathur [EMAIL PROTECTED] wrote: Let's pray to whatever Gods or Chaos or Probability we believe in that they never do. GPG/PGP on a web-mail service is an oxymoron -- the whole point of personal privacy is

Re: [ilugd] Mail authentication

2008-09-11 Thread Sudev Barar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Raj Mathur wrote: Let's pray to whatever Gods or Chaos or Probability we believe in that they never do. GPG/PGP on a web-mail service is an oxymoron -- the whole point of personal privacy is lost if you're delegating signing and/or

[ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
How can I show / prove that the copy of email shown by some one is not tampered with when compared to original email? Scenario - A sent an email to a B and D. B has tampered with the text of email and forwarded to C. C comes to D with a print copy of email from B. How can D show C that the

Re: [ilugd] Mail authentication

2008-09-10 Thread Ashish Shukla आशीष शुक्ल
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sudev Barar writes: How can I show / prove that the copy of email shown by some one is not tampered with when compared to original email? Scenario - A sent an email to a B and D. B has tampered with the text of email and forwarded to C. C comes

Re: [ilugd] Mail authentication

2008-09-10 Thread Mehul Ved
On 9/10/08, Sudev Barar [EMAIL PROTECTED] wrote: How can I show / prove that the copy of email shown by some one is not tampered with when compared to original email? Scenario - A sent an email to a B and D. B has tampered with the text of email and forwarded to C. C comes to D with a

Re: [ilugd] Mail authentication

2008-09-10 Thread Nishant Sharma
Scenario - A sent an email to a B and D. B has tampered with the text of email and forwarded to C. C comes to D with a print copy of email from B. How can D show C that the original email by A and forwarded email by C are modified. D has shown C the original from A but C is not

Re: [ilugd] Mail authentication

2008-09-10 Thread आशीष शुक्ल Ashish Shukla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In [EMAIL PROTECTED], Nishant Sharma wrote: Scenario - A sent an email to a B and D. B has tampered with the text of email and forwarded to C. C comes to D with a print copy of email from B. How can D show C that the original email by A and

Re: [ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: but C is not convinced and is casting aspersion on A and D of showing tampered emails. A basic check that I will do is - get full mail headers of mail sent to D and of that sent to C, read headers from bottom to up to find the

Re: [ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
2008/9/11 Raj Mathur [EMAIL PROTECTED]: On Thursday 11 Sep 2008, Sudev Barar wrote: [snip] How does pgp signature generate hash and is there something out there which could be fed in given text and public key of A to generate hash and compare it with hash appearing on the emaiil copy or C as

Re: [ilugd] Mail authentication

2008-09-10 Thread आशीष शुक्ल Ashish Shukla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In [EMAIL PROTECTED], Sudev Barar wrote: 2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: but C is not convinced and is casting aspersion on A and D of showing tampered emails. A basic check that I will do is - get full mail headers of mail

Re: [ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: How does pgp signature generate hash and is there something out there which could be fed in given text and public key of A to generate hash and compare it with hash appearing on the emaiil copy or C as forwarded by B? Good time to start using

Re: [ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sudev Barar wrote: Good time to start using PGP :). Lets have a key-signing party this software freedom day :). Yes. But I am using gmail for list work and that does not (yet?) support signing. Better that I move to using MUA for all mails. So

Re: [ilugd] Mail authentication

2008-09-10 Thread आशीष शुक्ल Ashish Shukla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In [EMAIL PROTECTED], Sudev Barar wrote: 2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: How does pgp signature generate hash and is there something out there which could be fed in given text and public key of A to generate hash and compare it

Re: [ilugd] Mail authentication

2008-09-10 Thread Raj Mathur
On Thursday 11 Sep 2008, Sudev Barar wrote: 2008/9/11 Raj Mathur [EMAIL PROTECTED]: If your mail program supports GPG/PGP (as most modern MUAs do), it will verify the hashes and signatures automatically. You don't need to start doing the hashing and verifying the signatures manually.

Re: [ilugd] Mail authentication

2008-09-10 Thread Sudev Barar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ? Ashish Shukla wrote: /me points sudev to http://getfiregpg.org/install.html Well, that has only support for inline PGP atm, and this list doesn't like MIME attachements :). Thanks. And Ashish, this is what I get on your signature

Re: [ilugd] Mail authentication

2008-09-10 Thread Raj Mathur
On Thursday 11 Sep 2008, Sudev Barar wrote: 2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: Good time to start using PGP :). Lets have a key-signing party this software freedom day :). Yes. But I am using gmail for list work and that does not (yet?) support signing. Better that I

Re: [ilugd] Mail authentication

2008-09-10 Thread Anupam Jain
On Thu, Sep 11, 2008 at 10:31 AM, Raj Mathur [EMAIL PROTECTED] wrote: On Thursday 11 Sep 2008, Sudev Barar wrote: 2008/9/11 आशीष शुक्ल Ashish Shukla [EMAIL PROTECTED]: Good time to start using PGP :). Lets have a key-signing party this software freedom day :). Yes. But I am using gmail for

Re: [ilugd] Mail authentication

2008-09-10 Thread आशीष शुक्ल Ashish Shukla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In [EMAIL PROTECTED], Sudev Barar wrote: ? Ashish Shukla wrote: /me points sudev to http://getfiregpg.org/install.html Well, that has only support for inline PGP atm, and this list doesn't like MIME attachements :). Thanks. And