Why cleartext digital signatures are dumb by AdamShand ...

> another way to look it is, if you're dilligent about signing emails, you 
> can prove that you didnt say something. It becomes impossible to forge
> emails - the content at least.

No you can't, you can prove that it's *unlikely* that you sent it (maybe you were away from your normal computer and using a friends computer or a web mail account). All signatures really allow you to prove is that you did send the signed messages.

I would rather be able to plausibly deny that I sent any email message then implement a solution to be able to prove that I sent some subset of messages which have my name on it.

Besides which, Google is bad enough when it comes to researching past sins on the web, I don't feel that I need to provide cryptographic proof of it to the world. :-)


Now if you're encrypting the message as well, then that's different. Then it's worth signing your messages so that the recipient does indeed know that it's from a certain sender.


CategoryGeek

DigitalSignatures (last edited 2002-03-08 00:14:08 by AdamShand)