Re: "PGP Encryption Proves Powerful"

hi ( 03.05.29 13:22 -0400 ) Ian Grigg: > Does anyone know of a repository for real life > attacks on crypto systems? bugtraq archives? perhaps due to the sensitive nature of encrypted data, many attacks may not be reported. and even if so, the reports may be incomplete, or misleading. -- \js

Re: The real problem that https has conspicuously failed to fix

hi ( 03.06.10 01:52 - ) John R. Levine: > Crypto lets someone say "Hi! I absolutely definitely have a name > somewhat like the name of a large familiar organization, and I'd like > to steal your data!" and lots of users will say "OK, fine, whatever." i think this is more a problem with peopl

Re: US Encryption Exports Clarified

hi [edited] > Finally this rule implements changes to the Wassenaar Arrangement List > that eliminate from Export Control Classification Number (ECCN) 5A002 > equipment specially designed and limited to controlling access to > copyright protected data. look- DCMA working to reduce encryption co

Re: End of the line for Ireland's dotcom star

hi ( 03.09.23 13:45 -0600 ) Anne & Lynn Wheeler: > is it still possible to show that there has been long term, > continuous, non-stop, highest security custodial care of the GTE > cybertrust CA private keys. If there hasn't ... would anybody even > know? i worked at cybertrust/baltimore up until

Re: Monoculture

hi ( 03.09.30 20:39 -0700 ) [EMAIL PROTECTED]: > And, given the recent set of widely publicized flaws in openssl and > openssh, I think that concern about monoculture in cryptography > software is pretty damn well founded. except for the fact that these holes get fixed as opposed to the other fla

Re: why "penny black" etc. are not very useful (could crypto stop spam??)

hi Amir Herzberg wrote: E-mail (at least from new correspondents) must be signed by an `anti-spam mail certification authority (ASMCA)` - often the ISP of the sender. Recipient's mail client (or server) will reject mail (from new correspondents) not certified by a trustworthy ASMCA. ok, but is

Re: How much for a DoD X.509 certificate?

hi > Peter Gutmann wrote: > > http://www.wjla.com/news/stories/0305/210558.html > > http://www.wjla.com/news/stories/0105/200474.html ( 05.08.11 12:55 -0600 ) Anne & Lynn Wheeler: > one might claim that part of this is the lingering affinity to offline > credentials ... when most really secur