[127861] in cryptography@c2.net mail archive
RE: how bad is IPETEE?
daemon@ATHENA.MIT.EDU (Dave Korn)
Fri Jul 11 13:08:57 2008
From: "Dave Korn" <dave.korn@artimi.com>
To: "'John Ioannidis'" <ji@tla.org>,
"'Cryptography List'" <cryptography@metzdowd.com>
Date: Fri, 11 Jul 2008 17:08:39 +0100
In-Reply-To: <487640D8.7080301@tla.org>
John Ioannidis wrote on 10 July 2008 18:03:
> Eugen Leitl wrote:
>> In case somebody missed it,
>>
>> http://www.tfr.org/wiki/index.php?title=Technical_Proposal_(IPETEE)
>>
>
> If this is a joke, I'm not getting it.
>
> /ji
I thought the bit about "Set $wgLogo to the URL path to your own logo
image" was quite funny. But they did misspell 'teh' in "Transparent
end-to-end encryption for teh internets".
It does sound a lot like "SSL/TLS without certs", ie. SSL/TLSweakened to
make it vulnerable to MitM. Then again, if no Joe Punter ever knows the
difference between a real and spoofed cert, we're pretty much in the same
situation anyway.
And of course those supposedly transparent fails-and-reconnects will turn
out to be anything but, in practice...
cheers,
DaveK
--
Can't think of a witty .sigline today....
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com