[16748] in cryptography@c2.net mail archive
Re: Simson Garfinkel analyses Skype - Open Society Institute
daemon@ATHENA.MIT.EDU (Mark Allen Earnest)
Fri Jan 28 19:15:26 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Fri, 28 Jan 2005 14:38:49 -0500
From: Mark Allen Earnest <mxe20@psu.edu>
Reply-To: mxe20@psu.edu
To: cryptography@metzdowd.com
In-Reply-To: <20050128174855.GE61249@lightship.internal.homeport.org>
This is a cryptographically signed message in MIME format.
--------------ms080803080100090708060202
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Adam Shostack wrote:
> I hate arguing by analogy, but: VOIP is a perfectly smooth system.
> It's lack of security features mean there isn't even a ridge to trip
> you up as you wiretap. Skype has some ridge. It may turn out that
> it's very very low, but its there. Even if that's just the addition
> of an openssl decrypt line to a reconstruct shell script.
>
> In that case, the value of 'better' is vanishingly small, but it will
> still take an attacker at least 5 minutes to figure that out.
I would contend that a false sense of security is worse than no security
at all. Someone's behavior may be different if they are wrongfully
assuming that their communications are encrypted by what they believe is
strong encryption when if fact it may be "very very low".
--
Mark Allen Earnest
Lead Systems Programmer
Emerging Technologies
The Pennsylvania State University
--------------ms080803080100090708060202
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms080803080100090708060202--
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
