Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.os.linux > #39179
| From | Mike Easter <MikeE@ster.invalid> |
|---|---|
| Newsgroups | alt.os.linux |
| Subject | Re: Marek Novotny Verification |
| Date | 2016-09-25 05:56 -0700 |
| Message-ID | <e4pvr3Fu4sbU1@mid.individual.net> (permalink) |
| References | <xIadnXt4DN1QvnrKnZ2dnUU7-YXNnZ2d@giganews.com> <x-udnTm_78K7yXrKnZ2dnUU7-L2dnZ2d@giganews.com> <v66dnb-Hws-zynrKnZ2dnUU7-ROdnZ2d@giganews.com> |
Marek Novotny wrote: > Do you see value in adding GnuPG signatures to your posts? Or is it > overkill? For the purposes of what we are talking about, clearsigning does not solve the problem because of what you say below. > If the guy reading the post isn't setup for verification then it > seems moot to me. Thoughts? That is correct. The true power of clearsigning involves a web of trust process for the public key and the involvement of those who would verify your clearsign into the scheme of verification. IMO clearsigning in newsgroups should be limited to newsgroups in which people are practicing the use of such tools, such as alt.security.pgp. In the case of newsgroup spoofs and forgeries, other strategies can be employed if necessary. The strategy depending on how 'aggressive' the adversary is. This GG example is trivial. For newsgroups, if you are choosing to use/expose an email address which belongs to you, 'legitimate' news servers which enforce policies against forgeries will act against those who would use their servers to forget you. The email address doesn't solve all of the problems; some people don't want to expose a good email address other limitations. Another strategy is to use a news server which stamps your nntp posting host, such as sunsite.dk/dotsrc.org -- Mike Easter
Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 01:09 +0000
Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:15 -0700
Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:17 -0700
Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-24 23:35 -0500
Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 21:48 -0700
Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-25 12:22 +0700
Re: Marek Novotny Verification Teemu Likonen <tlikonen@iki.fi> - 2016-09-25 08:41 +0300
Re: Marek Novotny Verification "Carlos E.R." <robin_listas@invalid.es> - 2016-09-25 11:51 +0200
Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:37 +0000
Re: Marek Novotny Verification Jasen Betts <jasen@xnet.co.nz> - 2016-09-25 10:29 +0000
Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:42 +0000
Re: Marek Novotny Verification jrg <connyank@cox.net> - 2016-09-25 08:07 -0700
Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 15:09 +0000
Re: Marek Novotny Verification Mike Easter <MikeE@ster.invalid> - 2016-09-25 05:56 -0700
Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-25 09:56 -0500
Re: Marek Novotny Verification William Poaster <wp@dev.null> - 2016-09-25 11:51 +0100
Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:40 +0000
Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-26 05:49 +0700
Re: Marek Novotny Verification Dan Purgert <dan@djph.net> - 2016-09-26 10:50 +0000
Re: Marek Novotny Verification Bud Frede <frede@mouse-potato.com> - 2016-09-26 06:47 -0400
csiph-web