🚀 go-pugleaf

ritter@cactus.org (Terry Ritter) writes:
> In <9209252236.1.20681@cup.portal.com> a-boyles@cup.portal.com writes:

->I think Terry Ritter is underestimating the effort needed to successfully
->carry out the spoofing attack he describes.

> Look, I really want to get out of this discussion, but this is
> really quite outrageous.  We're talking about computers here.
> Once a decent spoofing program is written, how much does it "cost"
> to get it running on a bunch of nodes?  Perhaps the expense of
> visiting the various node owners and pulling out badges?

This entire argument has revolved around establishing the private key of
someone you haven't met, or can't meet, in person or by telephone.  Pray
tell, just why would you want to do that?  No matter how the person comes
across on newnews, he or she could be an agent provacateur or spy or...
I mean, the ultimate (and simplest) spoof is to just pretend to be someone
else when you are on the net.

Why would you attempt to set up a secret channel with someone you haven't
'vetted by other means?
-- 
Marc Kaufman (kaufman@CS.Stanford.EDU)