Re: Problems with MSP (not)

Housley, Russ (housley@spyrus.com)
Fri, 16 Feb 96 06:14:46

Raph:

>>>   I agree that MSP's signed receipt type is valuable, but see no reason 
>>>why it can't be implemented as, say, a MIME receipt type which is then
>>>signed with the standard MIME-based signature protocol. In other words, I 
>>>see nothing inherent in MSP that enables this feature.
>>
>> Anyone else care to comment on this?
>
>  I'd really like the answer too!

In my previous note, I talked about cryptographic binding.  Clearly, there is 
more than one way to accomplish this.  However, MSP has been implemented, 
evaluated, and tested.  The method specified in MSP is solid.

>   By the way, I did a Web search, and came across a summary of a
>discussion about three years ago on pem-dev on the suitability of MSP
>(or pre-MSP) for Internet mail. Check
>http://www.eff.org/pub/Privacy/Crypto_misc/dod_pmsp_sdns.standards if 
>you're interested. 

Please do not confuse MSP and PMSP.  They are very different protocols.  In 
fact, I am one of the people who argued against PMSP.

Russ