Re: facebook messages worm

[Valdis.Kletnieks () vt edu]

On Thu, 07 Aug 2008 10:58:07 CDT, "John C. A. Bambenek, GCIH, CISSP" said:

> Has anyone heard of digital signatures for e-mail? :)

Well, this RFC probably counts as "prior art" 20 years ago:

0989 Privacy enhancement for Internet electronic mail: Part I: Message
     encipherment and authentication procedures. J. Linn. February 1987.
     (Format: TXT=63934 bytes) (Obsoleted by RFC1040, RFC1113) (Status:
     UNKNOWN

The *real* problem is that digital signatures for E-mail work in *exactly
the same way* and provide *the same protection* as SSL does for the Web.

Yes, that's the problem, not the solution statement.

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.