[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Mr. Squirrel? Just who is whom here?

>From: [email protected] (Hugh Daniel)

>  A second thing that Hal's comments bring up is that we were reading
>the From: headders and ignoreing the keys.  In good crypto-mail
>readers the key ought to be checked against our own data base of
>others keys and the result added to the hedders as say:
>	KeyCheck: FooBar Bazoid holds this key in XXX database
>or some such rot.  I wonder what is more important, who I claim to be
>in a random message or what key I include...

Anyone can include your key in a random message. If you just sign your
messages, then the whole thing goes away and everyone knows its from
you. PGP allows you to sign messages without encrypting them. The
problem is that most people find using PGP on routine email