[82749] in Cypherpunks
Re: PGP security problems?
daemon@ATHENA.MIT.EDU (Robert A. Costner)
Thu Jul 3 04:54:42 1997
Date: Thu, 03 Jul 1997 04:15:36 -0400
To: cypherpunks@toad.com
From: "Robert A. Costner" <pooh@efga.org>
In-Reply-To: <199707030715.BAA26652@wombat.sk.sympatico.ca>
Reply-To: "Robert A. Costner" <pooh@efga.org>
At 01:18 AM 7/3/97 EST, Carolyn Turbyfill (probably didn't) write:
>The email forgeries using bogus PGP keys to give the appearance
>that the messages are from PGP, Inc. and our employees are the
>result of a sick, twisted mind.
While a keyserver with no authentication has a very low barrier to entry
for false authentication, the barrier is not that much higher for even a
Verisign class three verification. I've continually said that the biggest
problem with secure authentication is that secure authentication is not
possible.
I hate to see people doing such things with keyservers and keys, but we all
knew the problem existed. I wonder where the solution is.
-- Robert Costner Phone: (770) 512-8746
Electronic Frontiers Georgia mailto:pooh@efga.org
http://www.efga.org/ run PGP 5.0 for my public key
