NODE d8af9178Re: DCSB: Electronic Commerce: The State of the Art
geoff@commtouch.co.il (geoff)Sat, 22 Jun 1996 08:01:08 +0800
--Boundary..3942.1071713588.multipart/mixed
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
The signature on the message attached below did not verify.
Pronto Secure has the neat feature of doing signature checking on the
fly.
In the process of testing PSecure I have collected from the
keyservers, the keys of most people on the list who pgp sign their
messages. (Another neat feature of PSecure makes this a one click task)
I could quite easily perform the service of bouncing messages with bad
signature back to the list.
Please let me know if people agree that this would be a useful
service, or is it inappropriate ?
My experience over the past few months is that around 10% of all signed
traffic on the list checks with a BAD SIGNATURE!
Geoff Klein
Pronto Secure Product Manager.
--Boundary..3942.1071713588.multipart/mixed
Content-Type: application/octet-stream; name="bin00001.bin"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="bin00001.bin"
Content-Description: "badsig"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--Boundary..3942.1071713588.multipart/mixed--
NODE b68112caRe: DCSB: Electronic Commerce: The State of the Art
"Travis J.I. Corcoran" <tjic@OpenMarket.com>Sat, 22 Jun 1996 04:58:01 +0800
-----BEGIN PGP SIGNED MESSAGE-----
Message-Signature-Date: Fri Jun 21 10:14:59 1996
> From: geoff@commtouch.co.il (geoff)
> Date: Fri, 21 Jun 1996 12:03:48 +0300
>
> The signature on the message attached below did not verify.
>
> Please let me know if people agree that this would be a useful
> service, or is it inappropriate ?
I use a lisp package for emacs that I wrote to automatically verify
signatures on incoming mail, so I already see the 10% of messages
which are improperly signed displayed in a red "bad signature" font.
Thus, I'd have no need of this service.
Further, it makes philisophical/political sense to me to have
verification distributed. Every node should be doing it's own
security.
Be aware of CC's before replying to this.
- --
TJIC (Travis J.I. Corcoran) http://www.openmarket.com/personal/tjic/index.html
Member EFF, GOAL, NRA.
opinions (TJIC) != opinions (employer (TJIC))
"Buy a rifle, encrypt your data, and wait for the Revolution!"
PGP encrypted mail preferred. Ask me about dragbar-time.el for emacs.
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Auto-signed by mail-secure.el 1.006 using mailcrypt
Comment: Processed by Mailcrypt 3.3, an Emacs/PGP interface
iQCVAwUBMcqubYJYfGX+MQb5AQFP5AQAzrePx1jhIfE/iHT0abqvOPQxpQ795/vk
CEJBSNLM91S3tSFXtcTvqYWRvE8BksT6l4JqwVhmDWN8U3UV60pJVqbwoLbH3bvs
fQcPT+HxvFDknrVIvQibwpOB9Pw9PCyV1mfMkyOjsJzRTCJe7XiFT7TS0bZA+VvX
Ls0Jpjozvnk=
=0x7g
-----END PGP SIGNATURE-----
NODE 1592439eRe: DCSB: Electronic Commerce: The State of the Art
Martin Janzen <janzen@idacom.hp.com>Sat, 22 Jun 1996 11:03:35 +0800
-----BEGIN PGP SIGNED MESSAGE-----
Geoff Klein writes:
> [...]
> In the process of testing PSecure I have collected from the
> keyservers, the keys of most people on the list who pgp sign their
> messages. (Another neat feature of PSecure makes this a one click task)
> I could quite easily perform the service of bouncing messages with bad
> signature back to the list.
> Please let me know if people agree that this would be a useful
> service, or is it inappropriate ?
Bounced messages would probably be considered inappropriate noise by
most list members. However, what about bouncing the message back to the
sender only? This alerts him to a possible problem -- a bad keyserver
entry, an attempted forgery, a mail transmission error, etc. -- without
bothering everyone else.
MJ
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
iQCVAwUBMcr3eG3Fsi8cupgZAQGprwP/RwVsYIiMZ5ZmMTM+d6i/p4u6sUdV0Jye
MFtPX79z2mcW8Mr7LpWqYNZojbr2lLvBie9kIsjKJDdYcvMrs5/5Mgagm4TlKIss
mRHve7HuijdTO17p8heHdjbIYo2Rk57O/8oYafHU9hit3+dpsX7OdQB3oFKH0Uy2
MQKry5CU+qc=
=k0VT
-----END PGP SIGNATURE-----