Proof of email ownership

Janusz A. Urbanowicz alex at bofh.net.pl
Tue Aug 9 19:05:25 CEST 2005


On Sun, Aug 07, 2005 at 02:48:56PM +0200, Werner Koch wrote:
> Hi!
> 
> Let me note that I am currently working on a simplified key validation
> scheme.  The basic idea is to connect a signature to an DNS entry.
> 
> Our assumption is that DNS is secure and unforgeable - as of now it is
> not but eventually DNSSEC will get deployed to solve this and many other
> problems.

This is the one assumption I can't accept. DNSSEC deployment is going slower
than IPv6 adaptation, and for many years this is the tehcnology that will be
adopted RSN. 

What is the exact purpose of the scheme, even assuming we have unforgeable
DNS - it seems not very clear to me?

Alex
-- 
mors ab alto 
0x46399138



More information about the Gnupg-devel mailing list