Re: Marek Novotny GnuPG

From	Mike Easter <MikeE@ster.invalid>
Newsgroups	alt.os.linux
Subject	Re: Marek Novotny GnuPG
Date	2016-09-26 07:26 -0700
Message-ID	<e4spfrFkap9U1@mid.individual.net> (permalink)
References	<RcadnQI3-M6t-HXKnZ2dnUU7-SPNnZ2d@giganews.com> <slrnnuhvdb.rof.dan@xps-linux.djph.net> <49knbd-qsr.ln1@Telcontar.valinor> <87fuom93wk.fsf@LkoBDZeT.terraraq.uk> <D40E7820.7E80A%usenet@gallopinginsanity.com>

Show all headers | View raw

Snit wrote:
> As it stands, it seems the forger can only do a piss-poor job and use Google
> Groups... easy to see. I think the real focus here would be to reduce the
> chance of someone getting confused between the two.

I think the current signing activity is temporary for purposes of 
testing, as would be done in a group such as alt.security.pgp.  I 
believe that there is general agreement that clearsigning as an 
anti-sporgery tactic isn't the best solution, which solution depends on 
the particular 'situation' including the adversary.

In the case of Marek's messages, he is using a pay news server and a 
valid From, which combine to make his headers sufficiently unique to not 
be easily 'strongly' spoofed/forged.

Many people use a free news server and an invalid From email, making 
them more vulnerable to sporgery games, depending on the adversary.

Not only does clearsigning create baggage/clutter, but the current 
technique also messes up/ affects/ the sig delimiter.

-- 
Mike Easter

Thread

Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 00:00 +0000
  Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-25 17:32 -0700
    Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 01:04 +0000
    Re: Marek Novotny GnuPG The Letter Q <babbaquimby@teachers.org> - 2016-09-26 11:12 -0400
  Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 03:56 +0200
  Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 10:53 +0000
    Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:10 -0700
      Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:22 -0700
        Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:45 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 10:10 -0700
            Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 10:54 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 11:27 -0700
            Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 18:40 +0000
            Re: Marek Novotny GnuPG Bit Twister <BitTwister@mouse-potato.com> - 2016-09-27 18:41 +0000
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 12:06 -0700
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 10:14 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 10:38 -0700
            Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 11:44 -0700
              Re: Marek Novotny GnuPG Melzzzzz <Melzzzzz@zzzzz.com> - 2016-09-27 19:00 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 12:20 -0700
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 00:04 +0200
                Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-27 23:21 +0100
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 15:35 -0700
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 00:44 +0200
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 15:58 -0700
            Re: Marek Novotny GnuPG "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2016-09-27 19:24 -0400
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 01:06 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 10:38 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 11:21 -0700
            Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 10:31 +0000
              Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 11:24 +0000
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 16:08 +0200
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 19:55 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 13:11 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 22:04 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 16:11 -0700
        Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:27 +0000
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 06:59 -0700
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:25 +0000
    Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 15:26 +0200
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:33 +0000
        Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 15:40 +0200
          Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:48 +0000
      Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-26 14:39 +0100
        Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 07:00 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 07:26 -0700
            Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 14:53 +0000
            Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 14:59 +0000
              Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 15:01 +0000
            Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 07:34 -0700
              Re: Marek Novotny GnuPG Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-26 18:24 +0200
                Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 09:30 -0700
        Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 16:31 +0200
          Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-26 15:59 +0100
            Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 19:45 +0200
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 14:29 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 14:37 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:17 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 23:27 +0000
        Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:00 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:34 -0700
            Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-27 15:58 +0200
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 07:11 -0700
    Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 14:14 +0000
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 14:57 +0000
        Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 15:09 +0000
          Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 15:14 +0000
          Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 15:18 +0000

csiph-web