Hello Mrten,

Wednesday, January 16, 2002, 7:01:46 PM, you or presumably someone with your PGP
key wrote:
M> It's kinda a chicken-and-egg problem. You cannot easily initiate a secure
M> conversation using only an insecure communications channel.
M> Just to indicate that cryptography is not as easy as it seems :)

I wouldn't classify a PGP signature as secure communications.  A PGP
signature just verifies that the same person wrote a series of
messages.  As such, it requires no more 'trust' on my part to beleive
a key server download as to beleive you handing me a disk with the key
on it.  In either case, that key could be being used by you, or by
someone else you have given it to.

Its merely a convenient way of 'proving' what you did and did not say.
And by 'you' I don't mean a person, simply an email address that is
used repeatedly where all messages are signed with PGP.

Secure communication would entail the encryption of your message
itself, not the mere signing of it.

-- 
Best regards,
 Gary                            mailto:[EMAIL PROTECTED]



-- 
________________________________________________________
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ        : http://faq.thebat.dutaint.com 

Reply via email to