Marcus Brinkmann
<marcus.brinkmann=40rub(_dot_)de(_at_)dmarc(_dot_)ietf(_dot_)org> writes:
That seems almost like a bottomless pit. Some thoughts (not meant to be
exhaustive):
Thanks, saved me typing all that. If it's going to be done as an RFC, it
needs to come with a warning that at best any countermeasures are going to
stop simple-minded fingerprinting, but not anything very advanced.
Also if it's going to be done as an RFC then it should state what threat all
this will be defending against. "An attacker knowing that you're running out-
of-date software" barely qualifies as a threat - they can just try and attack
you anyway - and I can't see what other purpose it serves.
Peter.
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp