On 10 Nov 2002, Frank McConnell wrote:
I'm not asking for a cryptographically verifiable
ID, I'm asking that
I am. With our nobel gubment now planning to spy on its untrustworthy
citizens, I'm thinking of requiring people to use PGP or something similar
in order to communicate with me via e-mail anymore.
http://www.nytimes.com/2002/11/09/politics/09COMP.html?ex=1037854354&ei…
Absent this, how can I (as the receiver) tell the
difference between
authorized and unauthorized communications? I can't, and if I can't
I don't see how I can expect anyone else to do so.
That's what makes it possible for some miscreant to forge e-mail
claiming to be from HP, or eBay, and get people to reply with their
credentials. The recipients can't tell which messages to trust.