Delivery-Date: Wed, 15 Oct 2014 14:35:47 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.8 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id BE9131E0296;
	Wed, 15 Oct 2014 14:35:45 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 6679930EEF;
	Wed, 15 Oct 2014 18:35:41 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 1C02C31024
 for <tor-talk@lists.torproject.org>; Wed, 15 Oct 2014 18:35:38 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id gSERngvU2Kus for <tor-talk@lists.torproject.org>;
 Wed, 15 Oct 2014 18:35:38 +0000 (UTC)
Received: from mail.mail2tor.com (unknown [162.213.198.220])
 by eugeni.torproject.org (Postfix) with ESMTP id 022B030F01
 for <tor-talk@lists.torproject.org>; Wed, 15 Oct 2014 18:35:38 +0000 (UTC)
Date: Wed, 15 Oct 2014 18:35:18 +0000
From: "Grace H." <grace@mail2tor.com>
To: tor-talk@lists.torproject.org
Message-ID: <20141015183518.5ddafd19@mail2tor.com>
In-Reply-To: <20141013234347.400acc7d17abfbb3d9bc7cce@goksinakdeniz.net>
References: <8D1B39BE598AAF3-3104-1596D@webmail-m268.sysops.aol.com>
 <20141011231257.f09806476e3c140e4859a831@goksinakdeniz.net>
 <8D1B4CC13C7119B-ACC-1E474@webmail-vm094.sysops.aol.com>
 <543C36E8.1080105@riseup.net>
 <20141013234347.400acc7d17abfbb3d9bc7cce@goksinakdeniz.net>
Mime-Version: 1.0
Subject: Re: [tor-talk] Social Research on TOR in Turkey during March2014
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1734690996449164885=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============1734690996449164885==
Content-Type: multipart/signed; micalg=PGP-SHA512;
 boundary="Sig_/7qZS1lvPfSH=XRXgM6tjm6S"; protocol="application/pgp-signature"

--Sig_/7qZS1lvPfSH=XRXgM6tjm6S
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, 13 Oct 2014 23:43:47 +0300
G=C3=B6k=C5=9Fin Akdeniz <goksin@goksinakdeniz.net> wrote:

> Run: gpg --search-key "Paolo Cardullo" and import the key.
>=20
> Please use OpenPGP and GnuPG properly

He is using OpenPGP and GnuPG properly, but I believe you miss some
important fact about it. The original author did not give the key
details nor he did put his key id (before you added to your keyring).
Somebody reading this list could have created a key pair, and uploaded
to keyserver. Now you might have malicious key, which you will use to
encrypt your emails, and somebody having an access to that e-mail
address (via ISP or AOL) could read your email.

Do not blindly add keys just by searching the name. Wait for the
original author to at least verify using e-mail, or his web address. Of
course, there would be no guarantee for e-mail to be changed during the
transport. But it is a little unlikely to both change e-mail and key on
the web server. It depends on your threat model. I hope I made my point.

Regards,
Grace H.


--=20
D8C9 EF71 ADC3 0533 29DE  3A80 1152 D1CB 8D9C 47FD


--Sig_/7qZS1lvPfSH=XRXgM6tjm6S
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
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=wfGr
-----END PGP SIGNATURE-----

--Sig_/7qZS1lvPfSH=XRXgM6tjm6S--

--===============1734690996449164885==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============1734690996449164885==--

