PGP & GPG compatibility

2002-01-14 Thread Nicholas Brawn
What's the state of the game with PGP and GPG compatibility? Nick -- Real friends help you move bodies. - The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
Carl Ellison <[EMAIL PROTECTED]> writes: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > At 02:47 PM 1/14/2002 -0800, Eric Rescorla wrote: > >> Meanwhile, the information that the user > >> really looks at to make a security decision (the Palm logo and the > >> little padlock) aren't rela

Re: CFP: PKI research workshop

2002-01-14 Thread Carl Ellison
At 02:47 PM 1/14/2002 -0800, Eric Rescorla wrote: >> Meanwhile, the information that the user >> really looks at to make a security decision (the Palm logo and the >> little padlock) aren't related at all. >No possible security system can protect people who trust >whatever logo happens to be tra

Re: CFP: PKI research workshop

2002-01-14 Thread Arnold G. Reinhold
At 12:09 PM -0500 1/14/02, John S. Denker wrote: >... >Returning to PKI in particular and software defects in >particular: Let's not make this a Right-versus-Wrong >issue. There are intricate and subtle issues here. >Most of these issues are negotiable. > >In particular, you can presumably get s

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
Carl Ellison <[EMAIL PROTECTED]> writes: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > At 02:19 PM 1/14/2002 -0800, Eric Rescorla wrote: > >> Of course you do. That's why https://store.palm.com/ is such a > >> problem. You thought you were talking to (and wanted to talk to) > >> Palm C

Re: CFP: PKI research workshop

2002-01-14 Thread Carl Ellison
At 02:19 PM 1/14/2002 -0800, Eric Rescorla wrote: >> Of course you do. That's why https://store.palm.com/ is such a >> problem. You thought you were talking to (and wanted to talk to) >> Palm Computing, just like the logos and page layout said you were. >> You're not. You're talking to a MITM.

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
Carl Ellison <[EMAIL PROTECTED]> writes: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > At 09:44 AM 1/14/2002 -0800, Eric Rescorla wrote: > >"Stef Caunter" <[EMAIL PROTECTED]> writes: > >> Does a user of ssl services care to know absolutely that they are > >> communicating verifiably with

Re: CFP: PKI research workshop

2002-01-14 Thread Carl Ellison
At 09:44 PM 12/26/2001 +, Phillip Hallam-Baker wrote: [snip] >What we are not seeing is demand for naming semantics of the form 'the >person who fred call's jim'. You're right. That was a nice feature of SDSI, but I have see no call for it either, and I probably would before you would.

Re: CFP: PKI research workshop

2002-01-14 Thread Carl Ellison
At 09:44 AM 1/14/2002 -0800, Eric Rescorla wrote: >"Stef Caunter" <[EMAIL PROTECTED]> writes: >> Does a user of ssl services care to know absolutely that they are >> communicating verifiably with whom they believe they have contacted, or does >> the user care to know absolutely that their communi

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
"Stef Caunter" <[EMAIL PROTECTED]> writes: > > > "Stef Caunter" <[EMAIL PROTECTED]> writes: > > > Does a user of ssl services care to know absolutely that they are > > > communicating verifiably with whom they believe they have contacted, or > does > > > the user care to know absolutely that thei

True Names reviewed on /.

2002-01-14 Thread R. A. Hettinga
--- begin forwarded text Status: U From: "Trei, Peter" <[EMAIL PROTECTED]> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: True Names reviewed on /. Date: Mon, 14 Jan 2002 14:08:57 -0500 Sender: [EMAIL PROTECTED] http://slashdot.org/books/01/12/27/1845203.shtml 'michael' has reviewed

From epayments news

2002-01-14 Thread R. A. Hettinga
--- begin forwarded text Status: U Date: Mon, 14 Jan 2002 10:03:42 -0800 Subject: From epayments news From: Somebody To: "R. Hettinga" <[EMAIL PROTECTED]> Fujitsu Transaction Solutions Inc. will unveil a new handheld computer next week designed for retailers. The Fujitsu iPAD, a compact, Micr

Re: CFP: PKI research workshop

2002-01-14 Thread Stef Caunter
- Original Message - From: "Eric Rescorla" <[EMAIL PROTECTED]> To: "Stef Caunter" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; "SPKI Mailing List" <[EMAIL PROTECTED]> Sent: Monday, January 14, 2002 12:44 PM Subject: Re: CFP: PKI research workshop > "Stef Caunter" <[EMAIL PROTECTED]> writ

Disk Copy on Mac OS X

2002-01-14 Thread Jon Simon
Apple's Mac OS X comes with the encryption application Disk Copy, which allows you to create encrypted virtual volumes similar to those PGP Disk makes, but using AES-128 encryption. Is anyone aware of any analysis of this application's security? I haven't been able to dig any up. Thank you,

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
"Stef Caunter" <[EMAIL PROTECTED]> writes: > Does a user of ssl services care to know absolutely that they are > communicating verifiably with whom they believe they have contacted, or does > the user care to know absolutely that their communication is completely > private? These are inextricably

Re: CFP: PKI research workshop

2002-01-14 Thread D. A. Honig
At 10:49 AM 1/12/02 -0800, Carl Ellison wrote: > >If that's not good enough for you, go to https://store.palm.com/ >where you have an SSL secured page. SSL prevents a man in the middle >attack, right? This means your credit card info goes to Palm >Computing, right? Check the certificate. > Mor

Re: CFP: PKI research workshop

2002-01-14 Thread John S. Denker
[EMAIL PROTECTED] wrote: >... > People running around in business selling > products and services and then disclaiming any liability with regard > to their performance _for_their_intended_task_ is, IMHO, wrong. IMHO this presents an unsophisticated notion of "right versus wrong". By way of ana

Re: CFP: PKI research workshop

2002-01-14 Thread Stef Caunter
Does a user of ssl services care to know absolutely that they are communicating verifiably with whom they believe they have contacted, or does the user care to know absolutely that their communication is completely private? I believe that the latter is most important; transparency through certific

Re: CFP: PKI research workshop

2002-01-14 Thread Ben Laurie
Eric Rescorla wrote: > > Ben Laurie <[EMAIL PROTECTED]> writes: > > > Michael Sierchio wrote: > > > > > > Carl Ellison wrote: > > > > > > > If that's not good enough for you, go to https://store.palm.com/ > > > > where you have an SSL secured page. SSL prevents a man in the middle > > > > attac

Re: CFP: PKI research workshop

2002-01-14 Thread Michael Sierchio
[EMAIL PROTECTED] wrote: > If an automaker disclaimed liability for a vehicle, and a negligent > design or manufacture resulted in injury or loss, it is my > understanding that the liability disclaimer notwithstanding, the > automaker would be held responsible. Why do we believe that the same >

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
<[EMAIL PROTECTED]> writes: > Eric Rescorla writes: > > <[EMAIL PROTECTED]> writes: > > > If an automaker disclaimed liability for a vehicle, and a negligent > > > design or manufacture resulted in injury or loss, it is my > > > understanding that the liability disclaimer notwithstanding, the

Re: CFP: PKI research workshop

2002-01-14 Thread pasward
Eric Rescorla writes: > <[EMAIL PROTECTED]> writes: > > > Eric Rescorla writes: > > > Ben Laurie <[EMAIL PROTECTED]> writes: > > > > And most (all?) commercial CAs then disclaim any responsibility for > > > > having actually checked that right correctly... > > > While this is true, I'd

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
<[EMAIL PROTECTED]> writes: > Eric Rescorla writes: > > Ben Laurie <[EMAIL PROTECTED]> writes: > > > And most (all?) commercial CAs then disclaim any responsibility for > > > having actually checked that right correctly... > > While this is true, I'd point out that all the security software >

Re: CFP: PKI research workshop

2002-01-14 Thread pasward
Eric Rescorla writes: > Ben Laurie <[EMAIL PROTECTED]> writes: > > > Michael Sierchio wrote: > > > > > > Carl Ellison wrote: > > > > > > > If that's not good enough for you, go to https://store.palm.com/ > > > > where you have an SSL secured page. SSL prevents a man in the middle > >

Web Security Company Takes No Prisoners

2002-01-14 Thread R. A. Hettinga
http://www.nytimes.com/2002/01/14/technology/ebusiness/14SECU.html?pagewanted=print January 14, 2002 Web Security Company Takes No Prisoners By CHRISTINE BLANK s a former airborne infantry officer in the Army, Clarence Briggs was trained to protect the country from foreign enemies. Now, he

Hiding Sensitive Data Can Be Tough in a Digital Age

2002-01-14 Thread R. A. Hettinga
http://www.nytimes.com/2002/01/14/technology/ebusiness/14DELE.html?pagewanted=print January 14, 2002 Hiding Sensitive Data Can Be Tough in a Digital Age By JOHN MARKOFF SAN FRANCISCO, Jan. 13 - The modern task of successfully destroying electronic documents has become daunting enough to giv

Re: CFP: PKI research workshop

2002-01-14 Thread Eric Rescorla
Ben Laurie <[EMAIL PROTECTED]> writes: > Michael Sierchio wrote: > > > > Carl Ellison wrote: > > > > > If that's not good enough for you, go to https://store.palm.com/ > > > where you have an SSL secured page. SSL prevents a man in the middle > > > attack, right? This means your credit card i

Re: CFP: PKI research workshop

2002-01-14 Thread Ben Laurie
Michael Sierchio wrote: > > Carl Ellison wrote: > > > If that's not good enough for you, go to https://store.palm.com/ > > where you have an SSL secured page. SSL prevents a man in the middle > > attack, right? This means your credit card info goes to Palm > > Computing, right? Check the cert