-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Om 0:02 op donderdag 17 januari 2002, Nicholas:
> is that why when i tried to verify this message i got an error saying > unknown key? than i couldn't import your key.. strange *s/mime* attaches the public key to messages, PGP does not. In the signature-part of the message are the signature, and a reference to the public key used. you'll probably see a hexadecimal number there (Signer Key ID: 0x69F8AB25 comes to mind), as you probably do not have my public key in your key-ring. You have to get my public key from the key-servers, it's there (under another email-adress, I have so many :). I can also send it to you, if you insist :) However, for you to be *really* sure (we dive into details now) that I am who I say I am, I have to *physically* give you my public key, on a floppy disk perhaps. There is no other way to be *really* *really* sure that the signature under my email is really mine. Because, by getting the key from the key-server, you *trust* that a) the key-server has not been tampered with b) the connection you have with the key-server is not intercepted by someone and the data is being tampered with c) the key in the key-server is really mine. By requesting that I email you the key, you still do not have the guarantee that someone is intercepting all of our communications, and replacing my public key with his public key. This phenomenon is called a 'man-in-the-middle'-attack. It's kinda a chicken-and-egg problem. You cannot easily initiate a secure conversation using only an insecure communications channel. Just to indicate that cryptography is not as easy as it seems :) Mrten. -----BEGIN PGP SIGNATURE----- Version: PGP 6.5i iQA/AwUBPEYGXUtQMadp+KslEQKBagCfaTo8IUCe2WhoclUARp7sQ4ujbvAAoMyS MxK3LrnBixGXjY1F15/1ylYw =dwZG -----END PGP SIGNATURE----- -- ________________________________________________________ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d FAQ : http://faq.thebat.dutaint.com
