From: Chris Adams (no email)
Date: Mon May 01 2000 - 02:07:35 EDT
On 04/30/00 11:00:12 PM wrote:
>No, it's worse than that. With your private key in their hands, they can
>write
>messages, put on appropriate dates and sign them ... then say that you wrote
>them. (depending upon the technology that is used)
Yes. Couple that with treating key confiscation as a minor thing and I'd be
surprised if someone's key didn't end up accidentally being sent to a well-
connected competitor.
One possible line of defense other than complete civil disobediance might be
providing only the session key(s) used for encrypted documents instead of the
key-pair. It'd be interesting to see if the courts accept this.
|
|
|