spf-discuss
[Top] [All Lists]

Re: proposed PGP mechanism for SPF

2004-01-15 10:58:31
In <008601c3db87$acd84b70$cec8d684(_at_)sraq(_dot_)intra> 
<guillaume(_at_)filion(_dot_)org> writes:

fast xs module like Crypt::Rijndael: it is stronger than PGP,

It's a pretty bold claim to say that Rijndael/AES is stronger than PGP. PGP
can use TripleDES, and [...]

I'm not sure that for the stuff we would want to do with SPF that we
would need any symmetric encryption.  However, even if we did, we could
almost certainly get by with straight DES.  Even with today's
technology, it will still take days or weeks to crack DES and 
the authentication via SPF are much more empheral than that.

Having to use asymmetric encryption makes the speed issues moot.  The
empheral nature of SMTP transports makes the strength issue moot.


-wayne

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡