Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.os.linux > #39179

Re: Marek Novotny Verification

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Mike Easter <MikeE@ster.invalid>
Newsgroups alt.os.linux
Subject Re: Marek Novotny Verification
Date Sun, 25 Sep 2016 05:56:01 -0700
Lines 37
Message-ID <e4pvr3Fu4sbU1@mid.individual.net> (permalink)
References <xIadnXt4DN1QvnrKnZ2dnUU7-YXNnZ2d@giganews.com> <x-udnTm_78K7yXrKnZ2dnUU7-L2dnZ2d@giganews.com> <v66dnb-Hws-zynrKnZ2dnUU7-ROdnZ2d@giganews.com>
Mime-Version 1.0
Content-Type text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding 7bit
X-Trace individual.net nf1VHPnQCC61IrxkCbfelAp+9z3SumMF3uMhPcfC9A0G5jqv4x
Cancel-Lock sha1:tYWxtBjz7vTFcuKr/FyXnPCx2gE=
User-Agent Mozilla/5.0 (X11; Linux i686; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
In-Reply-To <v66dnb-Hws-zynrKnZ2dnUU7-ROdnZ2d@giganews.com>
Xref csiph.com alt.os.linux:39179

Show key headers only | View raw


Marek Novotny wrote:
> Do you see value in adding GnuPG signatures to your posts? Or is it
> overkill?

For the purposes of what we are talking about, clearsigning does not 
solve the problem because of what you say below.

> If the guy reading the post isn't setup for verification then it
> seems moot to me. Thoughts?

That is correct.  The true power of clearsigning involves a web of trust 
process for the public key and the involvement of those who would verify 
your clearsign into the scheme of verification.

IMO clearsigning in newsgroups should be limited to newsgroups in which 
people are practicing the use of such tools, such as alt.security.pgp.

In the case of newsgroup spoofs and forgeries, other strategies can be 
employed if necessary.  The strategy depending on how 'aggressive' the 
adversary is.  This GG example is trivial.

For newsgroups, if you are choosing to use/expose an email address which 
belongs to you, 'legitimate' news servers which enforce policies against 
forgeries will act against those who would use their servers to forget 
you.

The email address doesn't solve all of the problems; some people don't 
want to expose a good email address other limitations.

Another strategy is to use a news server which stamps your nntp posting 
host, such as sunsite.dk/dotsrc.org




-- 
Mike Easter

Back to alt.os.linux | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 01:09 +0000
  Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:15 -0700
  Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:17 -0700
  Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-24 23:35 -0500
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 21:48 -0700
      Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-25 12:22 +0700
        Re: Marek Novotny Verification Teemu Likonen <tlikonen@iki.fi> - 2016-09-25 08:41 +0300
      Re: Marek Novotny Verification "Carlos E.R." <robin_listas@invalid.es> - 2016-09-25 11:51 +0200
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:37 +0000
      Re: Marek Novotny Verification Jasen Betts <jasen@xnet.co.nz> - 2016-09-25 10:29 +0000
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:42 +0000
          Re: Marek Novotny Verification jrg <connyank@cox.net> - 2016-09-25 08:07 -0700
            Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 15:09 +0000
      Re: Marek Novotny Verification Mike Easter <MikeE@ster.invalid> - 2016-09-25 05:56 -0700
      Re: Marek Novotny Verification Wildman <best_lay@yahoo.com> - 2016-09-25 09:56 -0500
  Re: Marek Novotny Verification William Poaster <wp@dev.null> - 2016-09-25 11:51 +0100
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 13:40 +0000
      Re: Marek Novotny Verification F Volker <here@home.net> - 2016-09-26 05:49 +0700
        Re: Marek Novotny Verification Dan Purgert <dan@djph.net> - 2016-09-26 10:50 +0000
      Re: Marek Novotny Verification Bud Frede <frede@mouse-potato.com> - 2016-09-26 06:47 -0400

csiph-web