----- Forwarded message from Adam Back -----
Date: Tue, 10 Sep 2013 22:09:26 +0200
From: Adam Back
To: "Fabio Pietrosanti (naif)"
Cc: Ian Brown , cryptography@randombit.net
Subject: Re: [cryptography] Forward Secrecy Extensions for OpenPGP: Is this still a good proposal?
User-Agent: Mutt/1.5.21 (2010-09-15)
You know coincidentally we (the three authors of that paper) were just
talking about that very topic in off-list (and PGP encrypted:) email.
I remain keen on forward-secrecy, and it does seem to be in fashion again
right now.
Personally I think we in the open community need to up our game an order of
magnitude. We thought we won the last crypto wars when mandatory key escrow
was abandoned, and US crypto export regs basically scrapped. But it turns
out instead they just went underground and sabotaged everything they could
gain influence over with a $250m/year black budget and limited regard for
law, ethics and human rights. Apparently including SSL MITMs using CAs
keys.
You've got to think (NSA claims to be the biggest employer of
mathematicians) that seeing the illegal activities the US has been getting
up to with the fruits of their labour that they may have a mathematician
retention or motivation problem on their hands. Who wants their life's work
to be a small part in the secret and illegal creation of a surveillance
state, with a real risk of creating the environment for a hard to recover
fascist political regime over the next century if the events allow even
worse governments to get in that further overthrow democratic pretense.
How about this for another idea, go for TLS 2.0 that combines ToR and TLS,
and deprecate HTTP (non TLS) and TLS 1.x and SSL. Every web server a ToR
node, every server an encrypted web cache, many browsers a ToR node.
Do something to up the game, not just blunder along reacting and failing
year on year to deploy fixes for glaring holes.
Adam
On Tue, Sep 10, 2013 at 08:35:08PM +0200, Fabio Pietrosanti (naif) wrote:
Hi all,
i just read about this internet draft "Forward Secrecy Extensions for
OpenPGP" available at
http://tools.ietf.org/html/draft-brown-pgp-pfs-03 .
Is it a still good proposal?
Should it be revamped as an actual improvement of currently existing use
of OpenPGP technology?
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography
----- End forwarded message -----
--
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org
AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5
