4 ms·
Sounds like the problem here is using the wrong tool for the job. Signatures are designed to prove who sent the message. If you want to hide who sent the messag
by takinola 2y ago
Sounds like the problem here is using the wrong tool for the job. Signatures are designed to prove who sent the message. If you want to hide who sent the message, you need something else. In your example, you would take an extra step of encrypting the message with your girlfriend’s public key so only she can decrypt it and then verify it came from you.
- ted_dunning 2y agoWell, the problem could be that you are taking a less useful definition of the purpose of a signature. Definition 1 (yours): given a message and a signature, you can derive the signing key and prove whether that key signed the message. Definition 2 (sophie's): given a message and a putative signing identity, you can prove whether the given ID signed the message. Since you are always free to include identity with the message, the second definition has a strictly greater scope of application.