4 ms·
> You absolutely cannot fake a message being cryptographically signed without providing a broken verification function. How about by obtaining the private key?
by jjnoakes 5y ago
> You absolutely cannot fake a message being cryptographically signed without providing a broken verification function.
How about by obtaining the private key?
- woojoo666 5y agoPretty much all of security relies on the user not giving out their passwords or secret keys. Imho it's an implicit assumption when talking about identity and security. If we break that assumption, nothing in the world is secure, and any discussion about security becomes pointless.
- jjnoakes 5y agoIn security contexts, you have to make your claims carefully and explicitly. Assumptions don't play nicely there. And getting access to private keys can happen by means other than the user volunteering them.