From mboxrd@z Thu Jan  1 00:00:00 1970
From: Lucio De Re <lucio@proxima.alt.za>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] re: spam filtering fs
Message-ID: <20030904065702.J15496@cackle.proxima.alt.za>
References: <66da6c9b445553becc9e3195ef487bb0@proxima.alt.za> <01d701c37216$7d6abce0$b9844051@insultant.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <01d701c37216$7d6abce0$b9844051@insultant.net>; from boyd, rounin on Wed, Sep 03, 2003 at 02:25:27PM +0200
Date: Thu,  4 Sep 2003 06:57:02 +0200
Topicbox-Message-UUID: 2c598e30-eacc-11e9-9e20-41e7f4b1d025

On Wed, Sep 03, 2003 at 02:25:27PM +0200, boyd, rounin wrote:
>
> the PKI is shot full of holes.
>
References, please.  I'm sure you're right, but I can't just quote
you :-)

> hacking [E]SMTP is probably a bad idea and only solves
> the problem for the hacked implementations.
>
Might be a good springboard for factotum to get some prime time.

> i still go for token in the sig.  it's simple and raises the bar -- that's
> what security is about.

PGP, then?  Accessing the public key servers is still a requirement,
although that's not hard to implement.

Russ should have a partial port of PGP that we'll need.

++L