Re: [Mailman-Developers] Crypto-sign to post

2006-11-09 Thread stephen
John W. Baxter writes: > I think all traces of the signature need to be stripped after it is used for > verification (but I could be wrong). This should be an option or at least there should be an easy way to work around it; suppose the message is something like a collection of checksums for a

Re: [Mailman-Developers] Crypto-sign to post

2006-11-09 Thread John W. Baxter
On 11/9/06 2:54 AM, "Stefan Schlott" <[EMAIL PROTECTED]> wrote: > Another possible problem: And yet another problem: the proliferation of different ways to create signed messages, and recognizing them successfully. I could sign messages at least three ways just using Apple's Mail.app: GPG wi

Re: [Mailman-Developers] Crypto-sign to post

2006-11-09 Thread Steve Huston
On 11/9/06 5:54 AM, Stefan Schlott wrote: > As you mentioned, signing of a message is easy; so it is easy to sign a spam > message, too. The problem is: Which key is used to sign the message, and how > do you determine whether a key belongs to a spammer or to an ordinary user? > The signature alone

Re: [Mailman-Developers] Crypto-sign to post

2006-11-09 Thread Stefan Schlott
Re-hi, > I brought this up on the Cairo mailing list recently > > and Carl Worth brought up the idea of a simple option to accept any post > that's cryptographically signed, regardless of subscriber status. I > liked this ide