Talk:1181: PGP - Revision history

Jacky720 at 19:22, 2 July 2017

2017-07-02T19:22:04Z

Davidy22 at 23:25, 11 March 2015

2015-03-11T23:25:50Z

108.162.216.190 at 13:49, 11 March 2015

2015-03-11T13:49:15Z

108.162.212.18 at 16:37, 28 June 2014

2014-06-28T16:37:43Z

141.101.98.51 at 13:36, 18 March 2014

2014-03-18T13:36:26Z

Sweerek at 15:30, 2 April 2013

2013-04-02T15:30:56Z

Sweerek at 15:28, 2 April 2013

2013-04-02T15:28:27Z

Sweerek: explained Authentic

2013-04-02T15:27:21Z

explained Authentic

Abhaysk at 01:06, 12 March 2013

2013-03-12T01:06:47Z

IronyChef at 16:25, 9 March 2013

2013-03-09T16:25:23Z

@@ Line 2: / Line 2: @@
 : I understood the same. I am probably the only nerd that use PGP. So if you receive a mail with that "heading" it's probably from me.[[Special:Contributions/83.42.5.246|83.42.5.246]] 09:20, 5 March 2013 (UTC)
 : '''"AUTHENTIC" what?'''  Not to be too much of an engineer, but a confirmed/verified PGP signature only means that the contents have not been altered and the message was signed by the stated someone, but that 'stated someone' isn't necessarily the person whom you think it is.  To map a real person to a digital signature PGP uses the "Web of Trust" model that relies upon the signer and reader trusting many third parties and thus building trust-links (a web)...  rather than a central authority figure who issues trust to both users (the PKI model).--[[User:Sweerek|Sweerek]] ([[User talk:Sweerek|talk]]) 15:28, 2 April 2013 (UTC)
 I don't really understand what's funny about this comic. [[Special:Contributions/76.106.251.87|76.106.251.87]] 05:53, 4 March 2013 (UTC)

@@ Line 1: / Line 1: @@
 Everybody below seems to have misread the comic.  It says nothing about 'verifying that the email is secure' or secret, or encrypted.  It says verifying that the email is '''AUTHENTIC'''.  This is a significant difference in meaning.[[Special:Contributions/24.70.188.179|24.70.188.179]] 15:55, 4 March 2013 (UTC)
 : I understood the same. I am probably the only nerd that use PGP. So if you receive a mail with that "heading" it's probably from me.[[Special:Contributions/83.42.5.246|83.42.5.246]] 09:20, 5 March 2013 (UTC)
@@ Line 44: / Line 42: @@
 What would have been really funny is if the email content showed an attempt at [http://en.wikipedia.org/wiki/Nigerian_scam Nigerian Scam]. [[User:Abhaysk|Abhaysk]] ([[User talk:Abhaysk|talk]]) 01:06, 12 March 2013 (UTC)
 :"As several others have noted, PGP can be used to encrypt and/or authenticate a message. I'd argue that the latter function is of little utility in the real world" :I'd argue the opposite, spoofing an email is trivial, reading someone elses email is somewhat harder. Having a policy of only performing certain actions based on signed mails from known keys makes a lot of sense. [[Special:Contributions/141.101.98.51|141.101.98.51]] 13:36, 18 March 2014 (UTC)

← Older revision		Revision as of 13:49, 11 March 2015
Line 1:		Line 1:
		+	The best use of this is to purposely send emails with invalid signatures. No one will ever notice since no one uses PGP. But if someone ever tries to hold you accountable for an email you sent, you can explain how PGP authentication works and prove that your signature is invalid. [[Special:Contributions/108.162.216.190\|108.162.216.190]] 13:49, 11 March 2015 (UTC)
		+
	Everybody below seems to have misread the comic. It says nothing about 'verifying that the email is secure' or secret, or encrypted. It says verifying that the email is '''AUTHENTIC'''. This is a significant difference in meaning.[[Special:Contributions/24.70.188.179\|24.70.188.179]] 15:55, 4 March 2013 (UTC)		Everybody below seems to have misread the comic. It says nothing about 'verifying that the email is secure' or secret, or encrypted. It says verifying that the email is '''AUTHENTIC'''. This is a significant difference in meaning.[[Special:Contributions/24.70.188.179\|24.70.188.179]] 15:55, 4 March 2013 (UTC)
	: I understood the same. I am probably the only nerd that use PGP. So if you receive a mail with that "heading" it's probably from me.[[Special:Contributions/83.42.5.246\|83.42.5.246]] 09:20, 5 March 2013 (UTC)		: I understood the same. I am probably the only nerd that use PGP. So if you receive a mail with that "heading" it's probably from me.[[Special:Contributions/83.42.5.246\|83.42.5.246]] 09:20, 5 March 2013 (UTC)

← Older revision		Revision as of 16:37, 28 June 2014
Line 9:		Line 9:

	I think merely the fact that PGP is in the email itself suggests the sender of the email is probably just a big nerd and therefore can be trusted. {{unsigned\|153.90.91.1}}		I think merely the fact that PGP is in the email itself suggests the sender of the email is probably just a big nerd and therefore can be trusted. {{unsigned\|153.90.91.1}}
		+	: You are the type of person that the comic is making fun of. You assume it's safe and don't bother to verify it. [[Special:Contributions/108.162.212.18\|108.162.212.18]] 16:37, 28 June 2014 (UTC)

	Isn't it that those markers could very simply just have been typed in, rather than being part of the decryption system? [[User:DonGoat\|DonGoat]] ([[User talk:DonGoat\|talk]]) 07:41, 4 March 2013 (UTC)		Isn't it that those markers could very simply just have been typed in, rather than being part of the decryption system? [[User:DonGoat\|DonGoat]] ([[User talk:DonGoat\|talk]]) 07:41, 4 March 2013 (UTC)

← Older revision		Revision as of 13:36, 18 March 2014
Line 40:		Line 40:

	What would have been really funny is if the email content showed an attempt at [http://en.wikipedia.org/wiki/Nigerian_scam Nigerian Scam]. [[User:Abhaysk\|Abhaysk]] ([[User talk:Abhaysk\|talk]]) 01:06, 12 March 2013 (UTC)		What would have been really funny is if the email content showed an attempt at [http://en.wikipedia.org/wiki/Nigerian_scam Nigerian Scam]. [[User:Abhaysk\|Abhaysk]] ([[User talk:Abhaysk\|talk]]) 01:06, 12 March 2013 (UTC)
		+	:"As several others have noted, PGP can be used to encrypt and/or authenticate a message. I'd argue that the latter function is of little utility in the real world" :I'd argue the opposite, spoofing an email is trivial, reading someone elses email is somewhat harder. Having a policy of only performing certain actions based on signed mails from known keys makes a lot of sense. [[Special:Contributions/141.101.98.51\|141.101.98.51]] 13:36, 18 March 2014 (UTC)

← Older revision		Revision as of 01:06, 12 March 2013
Line 37:		Line 37:

	Hmmm... my take, and I thought I saw someone else hint at this above, is that the PGP decoration leads the ''unsophisticated'' reader into a ''false'' sense of security. It's akin to that severe-looking envelope marked "For Official Business Only" but coming from some mass mailer making it seem like their solicitation is in fact some official governmental communication. "It's got ''that'' on the cover, it ''must'' be important. I better find out what it is..." Voila. Mission accomplished. -- [[User:IronyChef\|IronyChef]] ([[User talk:IronyChef\|talk]]) 16:25, 9 March 2013 (UTC)		Hmmm... my take, and I thought I saw someone else hint at this above, is that the PGP decoration leads the ''unsophisticated'' reader into a ''false'' sense of security. It's akin to that severe-looking envelope marked "For Official Business Only" but coming from some mass mailer making it seem like their solicitation is in fact some official governmental communication. "It's got ''that'' on the cover, it ''must'' be important. I better find out what it is..." Voila. Mission accomplished. -- [[User:IronyChef\|IronyChef]] ([[User talk:IronyChef\|talk]]) 16:25, 9 March 2013 (UTC)
		+
		+	What would have been really funny is if the email content showed an attempt at [http://en.wikipedia.org/wiki/Nigerian_scam Nigerian Scam]. [[User:Abhaysk\|Abhaysk]] ([[User talk:Abhaysk\|talk]]) 01:06, 12 March 2013 (UTC)

← Older revision		Revision as of 16:25, 9 March 2013
Line 35:		Line 35:

	Also, Randall's comment that the presence of a signature does not necessarily authenticate the message is reminiscent of [[1121: Identity]]. --[[Special:Contributions/213.151.48.139\|213.151.48.139]] 12:13, 6 March 2013 (UTC)		Also, Randall's comment that the presence of a signature does not necessarily authenticate the message is reminiscent of [[1121: Identity]]. --[[Special:Contributions/213.151.48.139\|213.151.48.139]] 12:13, 6 March 2013 (UTC)
		+
		+	Hmmm... my take, and I thought I saw someone else hint at this above, is that the PGP decoration leads the ''unsophisticated'' reader into a ''false'' sense of security. It's akin to that severe-looking envelope marked "For Official Business Only" but coming from some mass mailer making it seem like their solicitation is in fact some official governmental communication. "It's got ''that'' on the cover, it ''must'' be important. I better find out what it is..." Voila. Mission accomplished. -- [[User:IronyChef\|IronyChef]] ([[User talk:IronyChef\|talk]]) 16:25, 9 March 2013 (UTC)