[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: premail.
At 9:27 PM -0800 12/30/96, Anonymous wrote:
>A scenario:
>
>1) The spooks put a bug (named Eve) on the link between
>kiwi.cs.berkeley.edu and the Internet.
>
> Whenever kiwi.cs.berkeley.edu sents out the pubring.pgp Eve intercepts
>it and replaces it with a file of the spooks' choosing. This file will
>selectively replace the public pgp keys of some of the remailers (say exon)
>in pubring.pgp with keys to which the spooks know the private key.
(1) Protection against this scenario is what the signatures on the key are for.
(2) Nomenclature quibble: It would have to be Mallory, not Eve. Eve can
only listen. Mallory is a lot more dangerous because he can
alter/delete/insert messages as well as listen.
-------------------------------------------------------------------------
Bill Frantz | Client in California, POP3 | Periwinkle -- Consulting
(408)356-8506 | in Pittsburgh, Packets in | 16345 Englewood Ave.
[email protected] | Pakistan. - me | Los Gatos, CA 95032, USA