3 ms·
What is lost here by doing so? If someone tries to imitate your Twitter account: - they could clone your signed messages, but *you* wrote them. - they cou
by thephyber 6y ago
What is lost here by doing so?
If someone tries to imitate your Twitter account:
- they could clone your signed messages, but *you* wrote them.
- they could use a new PGP key to sign their messages, but they aren't claiming your PGP identity
- modern cryptographic algos have many resistance properties so your stated scenario is not a weakness
- vimax 6y agoSuch a short signed message could be used out of context in the future. Bob somewhere else is talking about a different idea, and I claim to be Alice and send Alice's signed "this is a great idea" message. The signature checks out, and it seems to be in response to what Bob is talking about, so Bob would assume Alice think his idea is great. You want to make sure that whatever you signed can't be used against you out of context. It would be safer to sign a message like "date> {today's date}, re> {parent message hash}, this a great idea"
- mirimir 6y agoBack in the day, I used to PGP sign Usenet messages. I used a news reader where I could specify message ID. So I signed text that included the date and message ID.