[plug] Was bun fight about "bad" words.

[bob]

On Mon, 2002-04-01 at 21:13, Paul Wilson wrote:
 
> Absolutely. A web of trust is not a digital signature, neither is it proof
> of origination. Of course, my analog signature on a letter isn't proof of
> much without external supporting evidence either, so let's not get too
> flustered here.

I'm not too sure about a signature on a letter not coming with
supporting evidence. I've recently read something on micro-tremors in
handwriting being recoverable and analysable, revealing a host of data
on the health, state of mind and _identity_ of the author. (sorry, can't
recall where exactly so I can't provide a ref. Maybe New Scientist?). 

But yes, the average person would not have easy access to such so it
remains a matter of divining provenance for signed documents of all
sorts.
 
> Bruce Schneider's piece is one of the clearest comments on the
> not-always-recognised problems with digital signatures that I've seen.

He has some very interesting things to say about the field of security
in general and is usually quite thought provoking.  

> The Hooker
 
-- 
bob
fingerprint = BBC8 A0BD 10DF CBF6 08C9  86AE 4672 2095 D705 90E9