[messaging] Google End-to-End plans on using key directories with a CT-like verification protocol

[Mike Hearn]

>
> Sorry I wasn't more clear. I was referring to the fact that the
> directory would be openly publishing a list of everyone's email
> addresses.  Even if you hash them, they're pretty trivially invertible.


Ah right. I don't think that aspect is a big deal. Given that spammers have
shown an ability to successfully invert tens of millions of *user passwords,
*I can't worry too much about them inverting a hash of a public address.

Hashing is still valuable though. Otherwise you'd get marketing people
worrying about people publishing lists of obviously phishy accounts and
embarassing the company, or people managing to locate the personal
addresses of celebrities by analysing account names etc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20140828/04a6d3a3/attachment.html>