encrypting to expired certificates

MFPA 2014-667rhzu3dc-lists-groups at riseup.net
Mon Sep 15 22:18:15 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Monday 15 September 2014 at 9:48:47 AM, in
<mid:CAAu18hcXojRy=z3bh0kopUeZOa9QvOGcWr+rMpqgc2enRzV3AA at mail.gmail.com>,
Nicholas Cole wrote:



> Opportunistic encryption with a fall-back mode to plain
> text, which seems to be your model, is dangerous.  Yes,
> it is always dangerous to have a protocol that sends in
> plain text if encryption is impossible.


I would characterise the use of "Opportunistic encryption" somewhat
differently:-

1. Plaintext is expected.

and

2. If encryption is possible I'll use it, but that's a bonus.



- --
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-groups at riseup.net

Life is far too important a thing ever to talk seriously about
-----BEGIN PGP SIGNATURE-----

iPQEAQEKAF4FAlQXSZxXFIAAAAAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pnVsD/0psQRGyGcZcaHK+IhhNDknlsfdN4JTilJCq
vCAZbszBN2jEFM6t32sCdJYz5gDmOVnS2Z6UwqnBUNwT2jjU0Co7ayjDXsr7emdw
X9KtBUwQzYbUknD/k0RRjOhntMPJZIs80DyieZxSag9SAnaxET0Uf4Znh6ECKxcg
OZX+WBkh
=yw+0
-----END PGP SIGNATURE-----




More information about the Gnupg-users mailing list