🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.crypt
Article #138

Re: A Trial Balloon on Registered Keys

#138
From: Bill Stewart +1-908-949-0705
Date: Thu, 29 Oct 1992 05:22
39 lines
3244 bytes
In article <1992Oct29.010208.17901@wdl.loral.com> mab@wdl39.wdl.loral.com (Mark A Biggar) writes:
   Sorry, this doesn't work because you can tell the illicit traffic from the legal
   traffic unless you already have the keys.  Anyone wanting to send illicit
   messages just registers any key and then uses a different key.  Unless you
   have the key you can't tell if the registered key was used or not.  

But with public keys, you *do* have the keys - presumably the Feds have
your public key as well as your private key and probably your email address,
so they can take some random sample of messages (maybe even 100%), and
validate whether the recipient's public key will work for the message.
If it doesn't, they seize the recipient's computer equipment on suspicion 
and get a warrant to force them to reveal the key if they want it back :-(   

An interesting question is WHO do they bust - the sender or the recipient?
If the recipient, then it's easy to frame someone by sending them a message 
with an unregistered key - how can you PROVE you don't have a private key 
hidden somewhere that can decrypt that message?   Even a misrouted
message could get you in trouble, and recent cases such as Steve
Jackson Games, etc., show that guilty-until-proven-innocent has become
the de facto rule, and is well on its way to de jure in this arena.

But if they bust the sender, that means they have to know who the
sender is, and (under a "just" draconian law) that the sender knowingly
used an unregistered key, but in reality, ignorance can get you busted.
This forces the sender of every email message to always verify the
registration of the recipient's key to prevent harassment, 
or else to always get the key from a known source, keeping records
that let the sender pass the responsibility on to the keymaster.
I sure wouldn't want to be a public key certifier under those conditions.
If the Feds don't go quite that far, there's an obvious market for an
anonymous mailforwarding system, deliberately memoryless to make
messages relatively untraceable.  It MIGHT have to be located outside the US,
but I can easily see a ban on cross-border transmission of encrypted messages.

--
#				Pray for peace;      Bill
#Bill Stewart 908-949-0705 wcs@anchor.ho.att.com AT&T Bell Labs 4M312 Holmdel NJ
# Trickle-Down Economics: Giving money to government bureaucrats 
#	and hoping some will trickle down to the people who need help.
Technical Details
Message-ID: <WCS.92Oct29002236@rainier.ATT.COM>
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!cbnewsi!cbnewsh!cbnewsh.cb.att.com!wcs
References: <1992Oct27.143737.1574@guvax.acc.georgetown.edu> <1992Oct28.005847.14096@netcom.com> <1992Oct28.014927.10360@schaefer.math.wisc.edu> <1992Oct29.010208.17901@wdl.loral.com>

Show Full Headers
Complete Article Headers
Newsgroups: sci.crypt
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!cbnewsi!cbnewsh!cbnewsh.cb.att.com!wcs
From: wcs@anchor.ho.att.com (Bill Stewart +1-908-949-0705)
Subject: Re: A Trial Balloon on Registered Keys
Organization: Sorcerer's Apprentice Cleaning Services
Date: Thu, 29 Oct 1992 05:22:36 GMT
Message-ID: <WCS.92Oct29002236@rainier.ATT.COM>
In-Reply-To: mab@wdl39.wdl.loral.com's message of Thu, 29 Oct 1992 01:02:08 GMT
References: <1992Oct27.143737.1574@guvax.acc.georgetown.edu>
 <1992Oct28.005847.14096@netcom.com>
 <1992Oct28.014927.10360@schaefer.math.wisc.edu>
 <1992Oct29.010208.17901@wdl.loral.com>
Sender: news@cbnewsh.cb.att.com (NetNews Administrator)
Nntp-Posting-Host: rainier.ho.att.com
Lines: 39