IETF Logo Mail Archive

Re: draft-ietf-openpgp-rfc2440bis-06.txt

Adrian von Bidder <avbidder@fortytwo.ch> Wed, 25 September 2002 09:35 UTC

Received: from above.proper.com (mail.proper.com [208.184.76.45]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA20221 for <openpgp-archive@lists.ietf.org>; Wed, 25 Sep 2002 05:35:43 -0400 (EDT)
Received: (from majordomo@localhost) by above.proper.com (8.11.6/8.11.3) id g8P9Rwp12466 for ietf-openpgp-bks; Wed, 25 Sep 2002 02:27:58 -0700 (PDT)
Received: from freemail.agrinet.ch (freemail.agrinet.ch [212.28.134.90]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g8P9Rvv12462 for <ietf-openpgp@imc.org>; Wed, 25 Sep 2002 02:27:57 -0700 (PDT)
Received: from syydelaervli.fortytwo.ch (81.6.8.94) by freemail.agrinet.ch (NPlex 5.1.056) id 3D90B8E300002037 for ietf-openpgp@imc.org; Wed, 25 Sep 2002 11:27:45 +0200
Received: from atlas.acter.ch (unknown [212.126.160.108]) by syydelaervli.fortytwo.ch (Postfix) with ESMTP id 3A1ED995E for <ietf-openpgp@imc.org>; Wed, 25 Sep 2002 11:27:44 +0200 (CEST)
Received: by atlas.acter.ch (Postfix, from userid 1047) id 435509793; Wed, 25 Sep 2002 11:27:43 +0200 (CEST)
Subject: Re: draft-ietf-openpgp-rfc2440bis-06.txt
From: Adrian von Bidder <avbidder@fortytwo.ch>
To: OpenPGP <ietf-openpgp@imc.org>
In-Reply-To: <sjmsmzzmp2l.fsf@kikki.mit.edu>
References: <Pine.LNX.4.30.QNWS.0209231142100.22100-100000@thetis.deor.org> <B9B54633.9809%jon@callas.org> <20020924103826.D3563@cdc.informatik.tu-darmstadt.de> <sjmsmzzmp2l.fsf@kikki.mit.edu>
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-DMOpxz2+S0m3DbTh4Afa"
X-Mailer: Ximian Evolution 1.0.8
Date: Wed, 25 Sep 2002 11:27:43 +0200
Message-Id: <1032946063.6116.75.camel@atlas>
Mime-Version: 1.0
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, 2002-09-24 at 16:37, Derek Atkins wrote:
> [...]If the
> attacker controls the keyserver and can remove revocations then
> obviously this doesn't work, but I don't think an attacker can control
> that many data points.

Depending on the attack scenario, it might suffice when one person does
not see a revocation certificate during a limited timeframe (while they
send some vital documents encrypted to the compromised key).

This only requires control of the network connection of one machine for
a specific time. Absolutely feasible.

cheers
-- vbi

-- 
secure email with gpg                           http://fortytwo.ch/gpg

NOTICE: subkey signature! request key 92082481 from keyserver.kjsl.com

v2.23.0 | Report a Bug | By Email