Re: chaffing and winnowing

Rickard Armiento <[email protected]>:

> That said, the biggest flaw in the solution you mention is that the
> hypotetical government has no problem getting permission to tap
> individual customer <-> ISP communication.

maybe you misunderstood my proposal.  i don't insist on im2000 to
contain any particular crypto, but i sure want it to have signatures
or some other form of authentication.  the type of encryption used
will be a user option, and im2000 MUST ensure that it's taken care of.

so chinese citizens, for example, just don't use keys for encryption
and they'll be fine.  don't take rivests paper too serious in my
proposal, and let's get on with it.  in five years from now, 1024 bit
RSA keys won't be secure anymore and there will be even better crypto
than we have today.  together with mathematicians presenting attacks
on them  :)

i'm personally rather more interested in criticism of all the other
parts of my proposal.

  clemens