Re: Anti-Nazi Authentication [Was: Tim's paranoid rant about Declan...]

[Bryce <wilcoxb@nag.cs.colorado.edu>]

-----BEGIN PGP SIGNED MESSAGE-----

 An entity calling itself "Declan B. McCullagh" <declan+@CMU.EDU>
 is alleged to have written:
> 
> Now, this guy copied that file from my web site. Fine -- it was up for
> FTP. But editing my comments to *support* Neo-Nazis and leaving my name
> is just fucking too much. I've sent him polite mail requesting a change.
> We'll see what happens.


Polite?  You show more restraint than most of us would 
I suspect.  Actually it is probably a good tactic for the
first encounter.


> Cypherpunk relevance? Authentication for web pages. There's no reason
> for a reasonable person to believe, at first glance, that I was *not*
> the author.


It is possible to PGP-clearsign web pages using comments.
PGP's insertion of "- " before any line beginning with "-"
might cause a problem, but you'll just have to be a little
more careful.  I'm considering hacking up a "PGP verification
service" web page which will accept a PGP-signed URL, 
retrieve it, verify it, and report the results.  Of course
I'll make it clear that this service is very susceptible to
active attacks.


On a related topic it would probably be wise for you to
clear-sign your mail, Declan.  Establish a public key with me,
and next time I see mail from you saying "I've been reading
about this 'the Holocaust was a hoax' stuff and it's actually
kind of convincing." I'll know where to lay the authorship of
the words...  :-)


Regards,

Bryce

                 "Toys, Tools and Technologies"
 <a href="http://www.c2.org/~bryce/Niche.html"> the Niche </a>
        New Signal Consulting -- C++, Java, HTML, Ecash
           <a href="mailto:bryce@c2.org"> Bryce </a>
 
PGP sig follows


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Auto-signed under Unix with 'BAP' Easy-PGP v1.01

iQCVAwUBMRIWjPWZSllhfG25AQE4UwP/eFEXJ0qoocgRdcNFqf2jeW/XOe8UNA8k
cQkYRSuyTwODEbNtkoLWoAGh+ucttGToy13uvA2e4WO8PG3LD2BVQlHP5Xi/umip
XpUn+Ge7fbCm4O2dlogf6HNLmTNo5BrwX8ET46wn1K4hLf695cIyYoMToua+4xWr
azZPYCg+eYs=
=unP7
-----END PGP SIGNATURE-----