Authentication at toad.com: WTF?

bill.stewart@pleasantonca.ncr.com +1-510-484-6204 wcs at anchor.ho.att.com
Mon Dec 5 16:09:43 PST 1994


Hmm, yes, using agents for security verification seems reasonable;
if you've got a legal relationship or other sufficient trust.
It does also require an adequate communication path between you
and your agent - on the incoming side so you know that the message
the agent verified is the message you're seeing (e.g. the agent's
signature on the message, plus potentially some check to make sure
all the messages get delivered), and on the outgoing side to make
sure your agent gets your messages correctly.

	Bill






More information about the cypherpunks-legacy mailing list