New answers tagged trust
0
I have a partial solution to show ownership of a post, but not to prove ownership of an email to the site.
Generate a random value R (or just use the post ID/hash or something), then sign it with secret key K.
The encrypted key K(R) is then attached to the message alongside R.
Releasing the key K would then let users determine that the user is the one who ...
0
You could use OAuth2 for this.
When the user wants to register, he enters his email, and the authorization service validates if they have an @example.com email. If so, it sends a link with a random token to the email with an expiration timestamp. The user clicks on the link, receives a random username (or creates one), and creates a password. No personal ...
1
Have the TA's output include a signature of the result of the computation, made with a key that only the TA knows.
The signed data needs to include the parameters of the computation as well, not just the result. Otherwise an adversary could take results of one computation and pretend they were the result of a different computation that the TA has also ...
answered Jun 25 at 22:21
Gilles 'SO- stop being evil'
44.2k13 gold badges103 silver badges158 bronze badges
Top 50 recent answers are included
