Article View: sci.crypt
Article #962Re: PGP *2.0* available
From: Marc Thibault
Date: Mon, 14 Sep 1992 10:53
Date: Mon, 14 Sep 1992 10:53
52 lines
2659 bytes
2659 bytes
In article <1992Sep12.032506.5521@colnet.cmhnet.org>
(Rob Stampfli) writes:
...
> It would be nice if the current folk would issue their own signature.
It's hard to believe they don't read this group - how about it
guys? Just a short message with your public keys for comparison.
>
> Another reason may be that they are using MD5 in 2.0. Does anyone know
> if pgp2.0 is compatible with pgp1.0?
It isn't, but they have put in the hooks to assure upward
compatibility in future versions.
MOREOVER:
To get the value of this, it seems to me that we all should take
the earliest opportunity to begin broadcasting public keys and
maybe convincing some ftp archives to start collecting them. I'm a
newbie on Usenet so I have no idea how best to do this.
Re spoofing: If I'm worried that someone's got a wedge in my mail,
I could send messages to a number of people who have published
their keys. The message would be encrypted with their public key
and contain copies of my public key inside and out. The message
would include instructions like "Please reply with a single word
'tomato' if both are the same and 'asparagus' if they are not,"
using a different pair of words for each message.
Whoever is spoofing would have no way of knowing what to do,
unless they were also spoofing everybody else. The best they could
do is stop the replies entirely, which would tell me what I needed
to know. At this point I would send my public key under cover to a
bunch of people with a request to broadcast it, along with a
disclaimer on the spoofer's key.
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.0
mQBNAiqxYTkAAAECALfeHYp0yC80s1ScFvJSpj5eSCAO+hihtneFrrn+vuEcSavh
AAUwpIUGyV2N8n+lFTPnnLc42Ms+c8PJUPYKVI8ABRG0I01hcmMgVGhpYmF1bHQg
PG1hcmNAdGFuZGEuaXNpcy5vcmc+
=HLnv
-----END PGP PUBLIC KEY BLOCK-----
---
Marc Thibault | | Any Warming,
marc@tanda.isis.org | Oxford Mills, Ontario | Global or otherwise,
CIS:71441,2226 | Canada | appreciated.
Technical Details
Message-ID:
<573311541DN5.61R@tanda.isis.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!torn!cunews!revcan!micor!uuisis!tanda!marcReferences:
<1992Sep7.142336.5733@ghost.dsi.unimi.it> <1992Sep10.161945.2210@vixvax.mgi.com> <1992Sep12.032506.5521@colnet.cmhnet.org>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!torn!cunews!revcan!micor!uuisis!tanda!marc From: marc@tanda.isis.org (Marc Thibault) Reply-To: marc@tanda.isis.org Newsgroups: sci.crypt Subject: Re: PGP *2.0* available Message-ID: <573311541DN5.61R@tanda.isis.org> References: <1992Sep7.142336.5733@ghost.dsi.unimi.it> <1992Sep10.161945.2210@vixvax.mgi.com> <1992Sep12.032506.5521@colnet.cmhnet.org> Date: Mon, 14 Sep 92 10:53:34 Distribution: na Organization: Thibault & Friends Lines: 47