[dcc2] Multi headers + metadata

codemastr codemstr at ptd.net
Thu Apr 29 19:34:17 EDT 2004





> Agreed, but to take if farther than that, the end user shouldn't even have
to
> know what a key is in order to get at least some level of encryption.  I'm
> not saying that the more secure option of being able to get a key from
> someone in a secure manner should be excluded, but that at some point we
need
> to settle for "safe enough is good enough" and leave it at that.

If there is no exchange of a key (be it public or private), then what you're
talking about is something like ROT13. And that's not encryption, that's
just "scrambling." If you're unfamiliar with ROT13, basically it takes each
letter (non-letters are not scrambled), and it moves each character 13
positions through the alphabet in a circular fashion. But as I said, that's
not encryption, that's just scrambling it. It really provides no security at
all. It's like saying, "test123" -> "321tset" is encryption; It is not.
Anyone who is even slightly familiar with the algorithm can decode it. In my
mind, no protection is better than a false sense of protection. Basically,
what you're asking for here is a lock on a door that provides security, but
has no locking mechanism. Well, if it has no locking mechanism, then how is
it a lock? You want an encryption algorithm (lock) that has no key (locking
mechanism). If it has no key, then anyone can decode it with relative ease.

-- codemastr




More information about the dcc2 mailing list