crypto flaw in secure mail standards

Ben Laurie ben at algroup.co.uk
Fri Jun 22 18:54:01 EDT 2001


"Jeffrey I. Schiller" wrote:
> Btw. I don't believe S/MIME has timestamps in its signature
> format. PGP does. PGP also implements a "for her eyes only" feature
> that only permits an encrypted message to be displayed, but not saved
> in a file. Now of course a sufficiently clever person can circumvent
> this protection. I am now wondering how hard it would be to circumvent
> this feature *and* keep the original message signature (of course if
> you have the PGP source code, you can do this).

Ummm ... and who would we expect _not_ to have the source?

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

In Boston 'til 1st July.



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com




More information about the cryptography mailing list