Fingerprint Firefox Plugin?

[Arcane Jill]

-----Original Message-----
From: zooko [mailto:zooko at zooko.com]
Sent: 24 October 2007 06:52
To: Arcane Jill
Cc: cryptography at metzdowd.com
Subject: Re: Fingerprint Firefox Plugin?

> Please let us know how it works for you.

My experience is very positive. It seems to be /exactly/ what I want, because I
don't necessarily trust Verisign or Thwarte or any of the other hundreds of
Root CAs which my browser trusts. I don't believe that every single one of them
would say no if some government, or military, or corporation with enough money,
asked/ordered them to issue a bogus certificate, but I do know that if that
were to happen, the fingerprint would change, and Petname Tool would flag me a
warning. It is an absolutely wonderful tool, as it moves trust from where it
doesn't belong (a bunch of faceless organisations whom I have no more reason to
trust than the websites I'm visiting) to where it does belong (in my own
hands). I love it!

I guess other people might want to know this, either because they need to adopt
the same security principles (if they are sound), or to criticize it (if not).

Arcane Jill

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com