Benlog

In a month, I’ll be presenting at Usenix’s Steps to Reducing Unwanted Traffic on the Internet workshop. The paper is “Lightweight Encryption for Email” (PDF), and my co-authors are Susan Hohenberger and Ronald L. Rivest.

At a high-level, we’ve designed (and prototyped) a mechanism for doing public-key signatures and encryption in the context of email, using only existing architecture and, most importantly, without deploying a public-key infrastructure that the user needs to know about. We think our approach will be quite useful in fighthing phishing attacks. The other papers regarding the phishing-specific components of our approach are still in submission. I’ll link to them when they’re ready.