Article View: sci.crypt
Article #1011Re: PGP *2.0* available
From: D. J. Bernstein
Date: Sun, 27 Sep 1992 22:23
Date: Sun, 27 Sep 1992 22:23
24 lines
1544 bytes
1544 bytes
Terry, you keep talking about ``security'' and ``validation'' and ``trust'' without saying what these words _mean_. A security violation is, by definition, a violation of the applicable security policy. When there is no policy, there can be no violations. If you're going to claim that a system is not ``secure,'' Terry, please point out the security policy which has been violated. (Note that a policy need not be a formal policy.) Only the interpretation of a message can be valid or invalid. A message, absent any interpretation, is neither valid nor invalid. If you're going to claim that something has not been ``validated,'' Terry, please point out what interpretation is in question. ``I trust T when he says X'' means that if T says X then I believe X. Trust, absent any definition of T or X, is meaningless. If you're going to claim that something is not ``trustworthy,'' Terry, please point out who T is and what X is. Now, Terry, why do you claim that MagNet is insecure? You say that its keys are not ``validated'': what interpretation of the keys are you talking about? ---Dan
Technical Details
Message-ID:
<20379.Sep2722.23.2792@virtualnews.nyu.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!ucbvax!virtualnews.nyu.edu!brnstndReferences:
<1992Sep7.142336.5733@ghost.dsi.unimi.it> <26375.Sep2405.50.5692@virtualnews.nyu.edu> <1992Sep25.053624.14515@cactus.org>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!ucbvax!virtualnews.nyu.edu!brnstnd From: brnstnd@nyu.edu (D. J. Bernstein) Newsgroups: sci.crypt Subject: Re: PGP *2.0* available Message-ID: <20379.Sep2722.23.2792@virtualnews.nyu.edu> Date: 27 Sep 92 22:23:27 GMT References: <1992Sep7.142336.5733@ghost.dsi.unimi.it> <26375.Sep2405.50.5692@virtualnews.nyu.edu> <1992Sep25.053624.14515@cactus.org> Organization: IR Lines: 24