Tag Info

New answers tagged

0

When I started using PGP, it seemed reasonable to me that my email address had changed over the years and would likely change again. Having keys tied to old email addresses seemed ridiculous, so I thought if I use my full legal name and my DOB, my PGP key would be tied to my real life identity. Others encouraged me to set up my PGP this way. This was ...


0

There is no real best practice here, only conventional usage. As with all types of digital IDs, the defining element when setting one up is knowing what you want to authenticate. The identity of an email user is pretty different from the one of a server and this will reflect in the properties of the certificate you generate. One common mistake (one you ...


2

I would suggest having multiple ways someone could confirm their identity with your site. Similar to how the DMV requires two forms of ID to get a driver's license (one from 'option A' and one from 'option b', etc...) There are many examples already given: (if possible, I would give the user many options and only require a few) Verify by email: Send an ...


0

Google has an interesting method for domain verification that can be applied. Make them upload a file named something like "a8br35.txt" to somewhere on their server.


-2

You can only encrypt with the public key and only decrypt with the private key. So, no, you can't decrypt e-mails with an e-mail address or the senders public key. This would completely defeat the purpose of public key crypto.


2

So I think I have a complete grasp on the question, and IBE. I'm going to attempt an answer. There is an end to my madness. IBE is based on bilinear pairings in cryptography. Page 23 of that paper is where they start talking about pairings, but I think the whole paper is relevant. A pairing scheme often used by IBE is Weil Pairing (also described in ...



Top 50 recent answers are included