Gentoo Archives: gentoo-user

From: Daniel Iliev <daniel.iliev@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Mailing list and PGP/MIME
Date: Wed, 28 May 2008 01:08:06
Message-Id: 20080528040802.1f346811@ilievnet.com
In Reply to: Re: [gentoo-user] Mailing list and PGP/MIME by Wolf Canis
1 On Tue, 27 May 2008 11:27:10 +0200
2 Wolf Canis <wolf.canis@××××××××××.com> wrote:
3
4 > Agreed, because of the way the subscription process works. The way how
5 > someone subscribed to a list is _only_ with a e-mail address. This
6 > would change if the subscription process would demand a signature.
7
8 Absolutely. I just wonder how many people will choose not to use such
9 kind of list in order not to sacrifice their anonymity.
10
11 > No fully agreed, because if someone is signing his messages, all other
12 > subscribers have the possibility to see whether it's the same person
13 > or not. Not in the sense of real live identity but at least same Nick
14 > or Name. In my case for example "Wolf Canis". Would know a message
15 > reach the ML with my Name but no signature or a different signature,
16 > could one relatively be sure about the fact that this particular
17 > message is not from the original "Wolf Canis".
18
19 It also might be the same person signing with different keys or
20 sometimes signing somtimes - not. What's the difference for the other
21 guys on the list - in both cases they will get some junk before the
22 offending account is stopped. What's the difference for the sender -
23 guilty or not, his address gets blacklisted.
24
25 > Why not? Every public key is downloadable, except one created a key
26 > and forgot to upload the public key, in this case is his/her signature
27 > pointless.
28
29 Forgot, choosed not to, didn't renew...
30 I believe it's the majority, but I may be wrong.
31
32
33 > > Bottom line: I see no reason for signing messages to MLs like this
34 > > one.
35 >
36 > Disagree, because of the possibility that without signatures it's
37 > relatively easy to bring a subscriber into discredit.
38
39 Relatively easy? Well, hereby I give you my blessing and dare you to
40 send a "proof of concept" message to this list imposing as me.
41 Additional condition: you must have no other access to Gmail than what
42 is granted to everyone outside the company. If you succeed I promise to
43 sign every single email I send from that point on. :)
44
45
46 --
47 Best regards,
48 Daniel
49 --
50 gentoo-user@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-user] Mailing list and PGP/MIME Wolf Canis <wolf.canis@××××××××××.com>
Re: [gentoo-user] Mailing list and PGP/MIME Michal 'vorner' Vaner <vorner@×××.cz>