Snake Oil FAQ 0.4 [comments appreciated]

[The Deviant]

On Mon, 16 Sep 1996, David K. Merriman wrote:

> Date: Mon, 16 Sep 1996 10:05:27 -0700 (PDT)
> From: "David K. Merriman" <merriman at amaonline.com>
> To: cypherpunks at toad.com
> Subject: Re: Snake Oil FAQ 0.4 [comments appreciated]
> 
> To: cypherpunks at toad.com
> Date: Mon Sep 16 12:05:17 1996

[usefull stuff rm'd]

> >
> >       The phrase easy-to-use should not appear in proximity to one
> > time pad, except in the context 'Easier key management than a one time
> > pad!"
> >
> 
> I would also suggest that the generation of OTP 'pads' for users is
> *highly* questionable. Who else is getting a copy of them, assuming they're
> even valid?
> 

Not to mention, the basic flaw of OTP.. if you have the only copy of the
key, and the key is non-repetitive, how do you send the key to another
person without being just as insecure as not encrypting it in the first
place... almost any OTP claims are gonna be snake oil.

 --Deviant
"I understand by 'freedom of Spirit' something quite definite -
the unconditional will to say No, where it is dangerous to say
No.
           Friedrich Nietzsche