[Cryptography] PGP-Signed Email

StealthMonger StealthMonger at nym.mixmin.net
Sat Aug 26 09:30:52 EDT 2017


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In a posting claiming to be from Jason Richards <jjr2 at gmx.com>but
lacking a signature, it is written:

> StealthMonger:
>> In an unsigned mail it is written:

> And on that note: there aren't too many PGP-signed emails sent to this
> list.  Many years ago I used to sign all of my emails, however I came
> to the conclusion that this is really quite pointless:
>
> o it proves only that whoever sent the email had access to my private
>   key at the time; and
> o provides non-repudiation, which is bad in the case that the person
>   who had access to my private key wasn't me.

These are reasons to use a strong PGP key and protect it well, not to
not use PGP signing at all.

> So, my question then is: what are the benefits of always sending
> PGP-signed email ... especially on open email lists such as this?

PGP signing enables to accrue a reputation which cannot be spoiled by
malicious forgery, and cannot be stolen.  This is especially important
for someone who is known only by her Internet utterances, such as a
persistent pseudonym.

         On the Internet, your key is who you be.

- -- 


 -- StealthMonger <StealthMonger at nym.mixmin.net>
    Long, random latency is part of the price of Internet anonymity.

   anonget: Is this anonymous browsing, or what?
   http://groups.google.ws/group/alt.privacy.anon-server/msg/073f34abb668df33?dmode=source&output=gplain


Key: mailto:stealthsuite at nym.mixmin.net?subject=send%20stealthmonger-key

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.9 <http://mailcrypt.sourceforge.net/>

iEYEARECAAYFAlmgXMAACgkQDkU5rhlDCl6NNACfU4qWjfAP1ieWQa5/paMcHxtk
INAAoIGHVjgQbnm9W6uuirIhJMC48hwW
=Nv2c
-----END PGP SIGNATURE-----


More information about the cryptography mailing list