Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.os.linux > #39179

Re: Marek Novotny Verification

From Mike Easter <MikeE@ster.invalid>
Newsgroups alt.os.linux
Subject Re: Marek Novotny Verification
Date 2016-09-25 05:56 -0700
Message-ID <e4pvr3Fu4sbU1@mid.individual.net> (permalink)
References <xIadnXt4DN1QvnrKnZ2dnUU7-YXNnZ2d@giganews.com> <x-udnTm_78K7yXrKnZ2dnUU7-L2dnZ2d@giganews.com> <v66dnb-Hws-zynrKnZ2dnUU7-ROdnZ2d@giganews.com>

Show all headers | View raw


Marek Novotny wrote:
> Do you see value in adding GnuPG signatures to your posts? Or is it
> overkill?

For the purposes of what we are talking about, clearsigning does not 
solve the problem because of what you say below.

> If the guy reading the post isn't setup for verification then it
> seems moot to me. Thoughts?

That is correct.  The true power of clearsigning involves a web of trust 
process for the public key and the involvement of those who would verify 
your clearsign into the scheme of verification.

IMO clearsigning in newsgroups should be limited to newsgroups in which 
people are practicing the use of such tools, such as alt.security.pgp.

In the case of newsgroup spoofs and forgeries, other strategies can be 
employed if necessary.  The strategy depending on how 'aggressive' the 
adversary is.  This GG example is trivial.

For newsgroups, if you are choosing to use/expose an email address which 
belongs to you, 'legitimate' news servers which enforce policies against 
forgeries will act against those who would use their servers to forget 
you.

The email address doesn't solve all of the problems; some people don't 
want to expose a good email address other limitations.

Another strategy is to use a news server which stamps your nntp posting 
host, such as sunsite.dk/dotsrc.org




-- 
Mike Easter

Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 01:09 +0000
  Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:15 -0700
  Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:17 -0700
  Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-24 23:35 -0500
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 21:48 -0700
      Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-25 12:22 +0700
        Re: Marek Novotny Verification Teemu Likonen <tlikonen@iki.fi> - 2016-09-25 08:41 +0300
      Re: Marek Novotny Verification "Carlos E.R." <robin_listas@invalid.es> - 2016-09-25 11:51 +0200
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:37 +0000
      Re: Marek Novotny Verification Jasen Betts <jasen@xnet.co.nz> - 2016-09-25 10:29 +0000
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:42 +0000
          Re: Marek Novotny Verification jrg <connyank@cox.net> - 2016-09-25 08:07 -0700
            Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 15:09 +0000
      Re: Marek Novotny Verification Mike Easter <MikeE@ster.invalid> - 2016-09-25 05:56 -0700
      Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-25 09:56 -0500
  Re: Marek Novotny Verification William Poaster <wp@dev.null> - 2016-09-25 11:51 +0100
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:40 +0000
      Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-26 05:49 +0700
        Re: Marek Novotny Verification Dan Purgert <dan@djph.net> - 2016-09-26 10:50 +0000
      Re: Marek Novotny Verification Bud Frede <frede@mouse-potato.com> - 2016-09-26 06:47 -0400

csiph-web