Subj : RE: Thinking of posting a code a week
To : apam
From : NuSkooler
Date : Sat Sep 23 2017 05:59 pm
Ap> I didn't plan on 'reinventing the wheel' just using a key based algorithm
Ap> instead of PGP. The reason for not using PGP is the users key would have
Ap> to be stored on the BBS, and the sysop would have access to them,
Ap> regardless of how buggy modern bbses are, this is a problem.
I (think) what he was saying is rolling your own crypto is generally considered
a no-no unless you're a crypto expert. And rightfully so: Creating secure
crypto is very hard, so it's better to use a well used and trusted system 99.9%
of the time.
*Any* crypto in a BBS that doesn't rely on you pasting/uploading pre-encrypted
data is going to suffer from the two problems I described previously: Trust
(you can't!) and plain-text travel.
