[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PGPticket

To: Bill Stewart <bill.stewart@pobox.com>, openpgp <ietf-open-pgp@imc.org>, pgpticket <ietf-pgpticket@vmeng.com>, Bill Frantz <frantz@netcom.com>, "spki@c2.net" <spki@c2.net>, "cme@cybercash.com" <cme@cybercash.com>
Subject: Re: PGPticket
From: Vinnie Moscaritolo <vinnie@apple.com>
Date: Mon, 8 Jun 1998 09:56:43 -0800
Sender: owner-ietf-open-pgp@imc.org

On 6/7/98, Men from Black Helicopters forced Bill Stewart to write:
 > 
> Is appending the nonce good enough, or should you really prepend as well?
> The problem is that lots of applications can potentially be tricked by
>  sign( "syntactically-correct-stuff,junk" )
> while they're less likely to accept messages with the junk first.
>

this is a great point! well taken..

I will fix this in the protocol..

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Vinnie Moscaritolo
Wordwide Developer Technical Support
N&C/Hardware

Apple Computer, Inc.                      email:  vinnie@apple.com
3 Infinite Loop, MS: 303-2T               phone:      408.974.5560
Cupertino, CA 95014                       fax:        408.862.7602
Fingerprint:     0AAF 9A74 113F 7FDD 97E6 04BD 1D7A 2D86 6F17 2A0A
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Prev by Date: Re: PGPticket
Next by Date: Re: PGPticket
Prev by thread: Re: PGPticket
Next by thread: KeyNote v0.1 release announcement
Index(es):
- Main
- Thread