From: Dan McGuirk (mcguirk@indirect.com)
Date: Sat Feb 19 2000 - 12:30:24 MST
In this situation, Charlie has to trust Bravo at least to identify the
right Alpha (Bravo will do something like send a public key to Charlie and
say, "this is Alpha's (temporary, anonymous) public key"). Bravo could
say that anyone is Alpha, so if Charlie does not trust Bravo to produce
the correct Alpha, the situation breaks down. However, if Charlie _does_
trust Bravo this much, then Charlie might as well just send his responses
to Bravo in plaintext and say "please forward these to Alpha without
reading them". Any cryptography used is subject to a perfect
man-in-the-middle attack by Bravo, so it doesn't buy you anything.
This archive was generated by hypermail 2.1.5 : Fri Nov 01 2002 - 15:26:55 MST