[FoRK] Poisoned DNS and informal certificates

[silky]

On Feb 20, 2008 6:37 PM, Eugen Leitl <eugen at leitl.org> wrote:
> On Tue, Feb 19, 2008 at 03:46:14PM -0800, Tom Higgins wrote:
>
> > In a more perfect world bank access would be done via one time use pads.
>
> Smartcards and a secure USB terminal with own keyboard and display
> would do plenty.
>
> > And yea, even then...and yea hte overhead of machinations..
>
> One-time pads would actually work, given how cheap transistors
> are today.

eh? what does transistor price have to to with otp? otp is about a
secure channel upfront, where the otp can be distributed, not but any
sort of processing power.


> But, there's no need, smartcards + secure readers
> can't be compromised.

it can if the implementation is complex. which it is. anyway, to say
it "can't be compromised" is not very wise. it's better to discuss the
ways in which it is secure. you can't predict what will happen in the
future, only what security it currently provides.

-- 
http://lets.coozi.com.au/

A: Because it messes up the order in which people normally read text.
Q: Why is it such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?