Re: More thoughts on Man in the Middle attacks and PGP

2000-09-13 Thread Arnold G. Reinhold
At 6:29 PM +0100 9/13/2000, Ben Laurie wrote: >"Arnold G. Reinhold" wrote: >> > > > > >There's really nothing stopping an implementation of SSL that uses PGP >> >for key verification. All that's really required at the end of the day >> >is some ASCII (to check the server name) and a public key, ve

Re: More thoughts on Man in the Middle attacks and PGP

2000-09-13 Thread Ben Laurie
"Arnold G. Reinhold" wrote: > > At 10:15 PM +0100 9/12/2000, Ben Laurie wrote: > >"Arnold G. Reinhold" wrote: > >> > >> I had some more thoughts on the question of Man in the Middle attacks > >> on PGP. A lot has changed on the Internet since 1991 when PGP was > >> first released. (That was the y

Re: More thoughts on Man in the Middle attacks and PGP

2000-09-13 Thread Arnold G. Reinhold
At 10:15 PM +0100 9/12/2000, Ben Laurie wrote: >"Arnold G. Reinhold" wrote: >> >> I had some more thoughts on the question of Man in the Middle attacks >> on PGP. A lot has changed on the Internet since 1991 when PGP was >> first released. (That was the year when the World Wide Web was >> introduc

Re: More thoughts on Man in the Middle attacks and PGP

2000-09-12 Thread Ben Laurie
"Arnold G. Reinhold" wrote: > > I had some more thoughts on the question of Man in the Middle attacks > on PGP. A lot has changed on the Internet since 1991 when PGP was > first released. (That was the year when the World Wide Web was > introduced as well.) Many of these changes significantly re

More thoughts on Man in the Middle attacks and PGP

2000-09-12 Thread Arnold G. Reinhold
I had some more thoughts on the question of Man in the Middle attacks on PGP. A lot has changed on the Internet since 1991 when PGP was first released. (That was the year when the World Wide Web was introduced as well.) Many of these changes significantly reduce the practicality of an MITM at