Re: Message Havens

[SINCLAIR DOUGLAS N <sinclai@ecf.toronto.edu>]

> 	Seems to me that you should also have all of the messages to you 
> collated into one block, have some random length padding added, and then 
> encrypt the whole thing and send it back to you. If you have this all 
> done automatically by the server at the haven, then you may not even need 
> to call all of those random other messages down. That is, assuming you 
> trust the sysadmin of that haven, which is probably not the best of ideas.
The only problem I see here is that it requires the message haven
know your public key.  All sorts of man-in-the-middle attacks become
possible here.  I don't know that I'd trust a machine to do an intellegent
web-of-trust; it can't actually meet people at a conference and swap cards.