[ProgSoc] encrypted mailing lists

[Vik <vik@nospam.progsoc.uts.edu.au>]

Just an idea I want to run past some security freaks to see how secure it
would b and what weak links there may be.

basically I want to set up an encrypted mailing list. My current idea is
this: The mailing list has its own private key stored on
the server, and the email addresses and public keys of all subscribers
stored on the server. To send a message to the list, someone encrypts the
message with the servers public key, the server decrypts it with its
private key, and re-encrypts it with every subscriber's public keys and
sends it out.

Generally, how does this sound? is there a weak link in the fact the msg
is not encrypted for a short time while its passing thru the server?

are there any other ideas or programs that do this out there?

cheers,

\/|<

Victor Rajewski

vik4@nospam.mindless.com
PGP: http://www.progsoc.uts.edu.au/~vik/pgp.txt


--
You are subscribed to the progsoc mailing list. To unsubscribe, send a
message containing "unsubscribe" to progsoc-request@nospam.progsoc.uts.edu.au.
If you are having trouble, ask owner-progsoc@nospam.progsoc.uts.edu.au for help.

This list is archived at <http://www.progsoc.uts.edu.au/lists/progsoc/>