[13629] in Cypherpunks
Re: Message Havens
daemon@ATHENA.MIT.EDU (SINCLAIR DOUGLAS N)
Fri May 13 17:25:52 1994
From: SINCLAIR DOUGLAS N <sinclai@ecf.toronto.edu>
To: dichro@tartarus.uwa.edu.au (Mikolaj Habryn)
Date: Fri, 13 May 1994 17:19:58 -0400
Cc: cypherpunks@toad.com
In-Reply-To: <199405131858.CAA05191@lethe.uwa.edu.au>; from "Mikolaj Habryn" at May 13, 94 2:58 pm
> Seems to me that you should also have all of the messages to you
> collated into one block, have some random length padding added, and then
> encrypt the whole thing and send it back to you. If you have this all
> done automatically by the server at the haven, then you may not even need
> to call all of those random other messages down. That is, assuming you
> trust the sysadmin of that haven, which is probably not the best of ideas.
The only problem I see here is that it requires the message haven
know your public key. All sorts of man-in-the-middle attacks become
possible here. I don't know that I'd trust a machine to do an intellegent
web-of-trust; it can't actually meet people at a conference and swap cards.
