Re: on possible ambiguity in Key IDs [was: Re: Help with OpenPGP plugin in Mozilla Thunderbird and Claws Mail]

2011-02-15 Thread Robert J. Hansen
On 2/15/11 11:35 PM, Daniel Kahn Gillmor wrote: Long-form keyIDs (of the form 0xDECAFBADDEADBEEF) are significantly harder to spoof, but easily within reach of a well-funded organization. IIRC, Jon Callas says an accidental long-ID collision has occurred. I don't recall the details. Still,

Re: on possible ambiguity in Key IDs [was: Re: Help with OpenPGP plugin in Mozilla Thunderbird and Claws Mail]

2011-02-15 Thread David Shaw
On Feb 15, 2011, at 11:44 PM, Robert J. Hansen wrote: On 2/15/11 11:35 PM, Daniel Kahn Gillmor wrote: Long-form keyIDs (of the form 0xDECAFBADDEADBEEF) are significantly harder to spoof, but easily within reach of a well-funded organization. IIRC, Jon Callas says an accidental long-ID

Re: on possible ambiguity in Key IDs [was: Re: Help with OpenPGP plugin in Mozilla Thunderbird and Claws Mail]

2011-02-15 Thread David Shaw
On Feb 15, 2011, at 11:35 PM, Daniel Kahn Gillmor wrote: On 02/15/2011 09:22 PM, lists.gn...@mephisto.fastmail.net wrote: If you have your public key published somewhere, such as on a key server, the Key ID is a way for other people to unambiguously look up the full key. You're quite