Re: On email and web security

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 14/01/2016 7:25 AM, "Doug Royer" <douglasroyer@xxxxxxxxx> wrote:
>
> On 01/13/2016 08:03 AM, Phillip Hallam-Baker wrote:
> >>...
> >> On 01/12/2016 06:27 PM, Phillip Hallam-Baker wrote:
> >
> > That is precisely the point. With proxy re-encryption 'recryption' you
> > do not need to trust the mailing list server. Only the list admin
> > needs to be trusted with the master decryption key.
>
> And you would have to trust the mailing list software verified that the
> incoming email was encrypted, and by a trusted source, and only accepted
> encrypted email.
>
> If the list server accepted unencrypted email, encrypted it with the
> lists key, would anyone be able to tell?
>

If it comes in plaintext, nothing stops the server (algorithmically or morally) from adding a header or some body text that says "I encrypted this, but before that it was clear"

At least then the recipients would know the message they received is the one the list server distributed, even if not the original author.


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]