Broken node.ref

Hezekiah <[email protected]> Fri, 24 Jan 2003 11:56:28 -0500
Newsgroups gmane.comp.security.invisiblenet.iip.devel
Message-ID <[email protected]>
On Friday, January 24, 2003 11:52, Mr. Echo wrote:
> I think the check sums were a bit much just for a file like that....

	You have to remember that IIP needs to be paranoid by default. I mean, what 
if someone managed to crack the server and change mids' node.refs!? Then if I 
used them, I could be sending my messages through a rouge relay! This might 
make it a little easier for the attacker to get my plaintext. So with BOTH a 
pgp signature, AND MD5 sums, we can rest our paranoia just a _little_ bit 
more. :)

	-- Hezekiah
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA+MXBEeHiZTMH32ioRAtdbAJ42iRQRAx0g8PZsm80T2CyuqmdJ5wCeNV3X
IhMd2BEAQaNx1ED2al687Qg=
=neU9
-----END PGP SIGNATURE-----