Re: rough sketch of a potential solution

On 2003-11-18 06:56:08 +0000, Adam M. Costello wrote:

> But I'm also skeptical of this roundabout way of presenting signatures:
> address1 signs the message, and signs a note saying "address2 is an
> alternate for address1", and the MUA then concludes that it's safe
> to tell the user that the message is signed by address2.

The proposed logic here seems to boil down to something like this:

	   (Mallory signs message) && (Mallory signs "I'm Alice")
	   	=> Alice has signed message.

This is flawed -- anyone could send signed messages on anyone else's
behalf with this scheme.
-- 
Thomas Roessler			      <[email protected]>