[104833] in Cypherpunks
Re: Using a password as a private key.
daemon@ATHENA.MIT.EDU (Anonymous)
Thu Oct 29 13:47:29 1998
Date: Thu, 29 Oct 1998 19:21:02 +0100
From: Anonymous <nobody@replay.com>
To: cypherpunks@cyberpass.net
Reply-To: Anonymous <nobody@replay.com>
> Kong takes an interesting approach to key certification and signatures -
> it doesn't use the "True Name" model with a Certificate Authority Trusted
> Third Party Subject To Many Government Regulations certifying that the
> person who has this key has that True Name. Instead, you sign messages,
> and it keeps a database of signed messages from peop le, and you can
> compare a message you have with a message you've received previously to
> see if it's signed by the same key, and you can send encrypted messages
> to the person who sent you a previous message.
What happens if you create another key which signs an existing message,
as was illustrated here recently in the case of Toto's key. Can you
convince Kong that you are the same person who sent the earlier message?
