On Fri, Feb 09, 2007 at 11:36:35AM +0100, Antonio Bleile wrote:
> Hi Sven,
> 
> > Hi!
> > 
> > Private/Public key does not buy you much in this case if all 
> > you want is to obfuscate the file contents.
> > Just use some AES implementation with the same symmetric key 
> > on the server and the client.
> > 
> > Despite you seem to be aware of it, let me stress again:
> > It cannot possibly be secure if the decryption key is stored 
> > alongside with the enrcypted data (which is why I chose the 
> > word "obfuscate" above).
> 
> Mh... That means I've missed something really fundamental...
> When you send an encrypted mail you send the encrypted
> data and the receiver at some point has both, the public
> key and your encrypted mail.

The receiver has the *private* key. The sender encrypts with the
*public* key.

-- 
Hans Ekbrand (http://sociologi.cjb.net) <[EMAIL PROTECTED]>
Q. What is that strange attachment in this mail?
A. My digital signature, see www.gnupg.org for info on how you could
   use it to ensure that this mail is from me and has not been
   altered on the way to you.

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to