Re: ADMIN: proposed new policy on the mailing list

[pierre@shell.portal.com (Pierre Uszynski)]

-----BEGIN PGP UNSIGNED MESSAGE-----


I'll vote yes to the amended policy proposal

> "make something that looks like a signature, or else".

While I tend to agree with the general argument presented in favor,
I'll also agree that there are several problems with it:

- Yes, it's too easy to circumvent the policy by cutting and pasting
something that looks like a signature (more or less :-)

- Even then, the 6 hour delay is not that much trouble when you are
actually building a discussion, and not flaming... So it would be
more like "if you want to flame, you better spoof"... hmmm :-( 

So, all in all, there is not that much incentive added to using signatures.
I think any is better than even less, so I'll still vote "yes"... at least
as an experiment...

But here are some more ideas:

1) have the mailing list relay insert disclaimers according to what it
recognized:

> remailer: This message wholly un-authenticated. The identity info
> presented in this message could have been faked by a 6 year old.
> Use digital signatures.

or,

> remailer: This message digitally signed. The pseudonymous identity
> used may have no relation with any Real Life Person.

or,

> remailer: This message digitally signed. Signature checked to match
> previous uses on this list by this pseudonym.

or,

> remailer: This message's digital signature does not match previous
> uses on this list by this pseudonym. This will be -version 2- of this
> pseudonym.

2) Campaign so that users of this list include "security disclaimers"
whenever they post or email on the net. That could be a sig or a header
line, such as "The identity info in this post could have been forged by
a six year old. Do not trust it. Use digital signatures."

3) To make it more obvious that the From: field can say just about
anything, use the "National Enquirer" headline generator that was
posted on the net to replace the incoming header:

>From: Diform Flying Saucer Throws Giant Tomato on the Pope

Maybe then, people will take that header less seriously...

Pierre (who?)
pierre@shell.portal.com

-----BEGIN PGP UNSIGNATURE-----
Version: 2.4

iQBFThIsMayHAVEBEEnarealsiGNatUre, IFi   onlYHaDEvERYthiNginPlace
toCheCKINcOmINGSigsTOO. :-)
=Bof
-----END PGP UNSIGNATURE-----