Anti-Nazi Authentication [Was: Tim's paranoid rant about Declan...]

[Rich Graves]

On Fri, 2 Feb 1996, Bryce wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
>  An entity calling itself "Declan B. McCullagh" <declan+ at CMU.EDU>
>  is alleged to have written:
> > 
> > Now, this guy copied that file from my web site. Fine -- it was up for
> > FTP. But editing my comments to *support* Neo-Nazis and leaving my name
> > is just fucking too much. I've sent him polite mail requesting a change.
> > We'll see what happens.
> 
> Polite?  You show more restraint than most of us would 
> I suspect.  Actually it is probably a good tactic for the
> first encounter.

Certainly a lot more polite than I am...
 
> > Cypherpunk relevance? Authentication for web pages. There's no reason
> > for a reasonable person to believe, at first glance, that I was *not*
> > the author.
> 
> It is possible to PGP-clearsign web pages using comments.
> PGP's insertion of "- " before any line beginning with "-"
> might cause a problem, but you'll just have to be a little
> more careful.

What's wrong with a prominent PGP-signed notice in <PRE>'s that "This
page, at URL [whatever], has a separate PGP signature at [other URL]." 
I've did that with the windows networking FAQ a few times until it just 
got to be too much trouble.

-rich