Domain registrars (was Re: signing + mailing lists)

[Len Sassaman]

On Thu, 20 Sep 2001, Michael H. Warfield wrote:

> 	Huh?  John, do you mean NSI?  NAI is Network Associates, associated
> with flavors of PGP but not domain registration.  NSI is Network Solutions
> Inc who use to be THE Internic (after NSF let it go into public hands and
> after SRI managed it for years).  They implimented the PGP guardian
> object which I immediately took advantage of and never had a single
> hickup or miss fire even though I've manged several dozen domains
> and been, at times, technical contact for over a hundred.
>
> 	I've never had them be "persistently unable to handle PGP signed
> mail" and have had it work every time.  Well, every time I used it
> properly...  :-)

Note, however, that it is not secure.

(Check the BugTraq archives for my writeup on how to exploit it.)


--Len.