[messaging] Message delivery and revocation in Pond etc
michael at briarproject.org
Thu Apr 3 16:11:16 PDT 2014
-----BEGIN PGP SIGNED MESSAGE-----
On 03/04/14 23:57, Ximin Luo wrote:
>> In the scheme I suggested, the recipient would remember which
>> contact each token had been issued to, so each junk message
>> would be attributable to either the contact to which the attached
>> token was issued, or the server - not any other contact.
> Yes, my wording could have been better, this is a new concept to
> me. The attack might seem esoteric, but if we can do better, why
> take this risk? The server being hostile is a problem you don't
> want to be uncertain about, and without this property, every single
> junk message raises the question "maybe the server is hostile, or
> maybe not".
Ah, sorry, I misunderstood. Yes I agree that Trevor's scheme allows
spam to be attributed to the server after a single message, whereas
mine would require multiple messages. So Trevor's scheme is better.
But my misunderstanding has raised a question: in Pond, does the
recipient have some trapdoor information that the server doesn't have,
allowing the recipient to tell which contact made the group signature?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Messaging