@jaybird110127@dragonscave.space
Post #3243861
2025-10-15 10:50 UTC
@datenwolf@chaos.social @micr0@wetdry.world It's funny, I was thinking this exactly! I don't live/work in such circles, but if someone were deliberately disappeared, and their government or whomever got control of their Email account and devices, this would be rendered meaningless since they could just keep responding, then the intended emergency contacts are none the wiser. I was thinking of a solution (sorry I'm not much of a programmer) where each pong must be accompanied by a secret passphrase known only to the user, and ideally stored as plaintext only in their mind. Of course this rules out responding by Email, since even if you're careful to always delete your pong from your Sent folder, fragments probably still remain.
Replies (1)
-
@datenwolf@chaos.social 2025-10-15 14:37
@jaybird110127@dragonscave.space @micr0@wetdry.world Replay attacks are one of the most basic cryptographic protocol weaknesses. Hence my suggestion to use PBKDF derived asymmetric signatures for signing the reply to the random verification token. By randomizing the verification token replay attack is mitigated, and by signing with PBKDF derived signature impersonation is mitigated.