Re: pgp in internet cafe (webpgp)

2003-03-25 Thread contrary
Delurking... Jesus. Stop picking at the guy (not just you, I mean everybody). Why not use your brains and suggest a few workarounds? Like: 1: Superencrypt beforehand. 2: Don't type if you can cut and paste. 3: Use one-time hard passwords 4: Use throw-away one time free email addresses

Re: pgp in internet cafe (webpgp)

2003-03-24 Thread Sunder
And (dumbass) you would trust the keyboard and display of an internet cafe is safe to type in your passphrase? Never heard of keystroke capturing? You're better off trying to find a WiFi access point - i.e. Starbucks or whatever cafe and using that instead with your own trusted hardware. That

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Thomas Shaddack
The https-ed webpgp interface should authenticate me via some sort of passphrase and then I can submit ciphertext for decryption Note: beware of keyloggers and cameras. Webcafes are far from secure environment. Consider using one-time passwords, eg. something like S/Key. Then you still run the

RE: pgp in internet cafe (webpgp)

2003-03-23 Thread Meyer Wolfsheim
On Sun, 23 Mar 2003, Lucky Green wrote: The question is - do I have to code this or has someone already done it ? http://www.lokmail.com/ It is inadvisable that anyone use Lokmail. The implications of a trust-us encrypted mail service are obvious, and the people behind Lokmail are of

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Dave Howe
Anonymous wrote: I want to use PGP while checking/sending e-mail via web interface on someone else's machine (say, internet cafe). So in one window I have webmail interface, and in the other window I have webpgp interface, and I paste ciphertext back and forth. The https-ed webpgp interface

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Eugen Leitl
On Sun, 23 Mar 2003, Morlock Elloi wrote: Ever tried to install a ssh client on a random internet cafe computer ? What's wrong with PuTTY on a floppy, USB stick, or http://leitl.org/putty.exe ? Works every time.

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Morlock Elloi
why not just use ssh? you can scp the text to your host, encrypt/decrypt it *there* then scp it back if needs be. you also then don't need to use webmail - just have a mailbox on that server that you forward your webmail to, and that you send email in the name of the webmail account from. its

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Dave Howe
Morlock Elloi wrote: Ever tried to install a ssh client on a random internet cafe computer Yup. 1. download putty 2. run putty 3. run batchfile that changes password to next oneshot 4. do whatever is needed 5. exit putty :)

Re: pgp in internet cafe (webpgp)

2003-03-23 Thread Ryan Lackey
Quoting Morlock Elloi [EMAIL PROTECTED]: why not just use ssh? you can scp the text to your host, encrypt/decrypt it *there* then scp it back if needs be. you also then don't need to use webmail - just have a mailbox on that server that you forward your webmail to, and that you send email

pgp in internet cafe (webpgp)

2003-03-22 Thread Anonymous
Assumptions: - I have https (SSL) access to a trusted unix box - I trust SSL - I'll take a risk of unknown machine running http client being subverted I want to use PGP while checking/sending e-mail via web interface on someone else's machine (say, internet cafe). So in one window I have