[ILUG] Question on an encryption system (using OSS)

[Braun Brelin]

I'm not trying to be mysterious here. :-) Basically, I'm looking for a way 
to distribute digital media (not necessarily software/tarballs, but any 
digital media, like, for example, mpeg's)
securely via P2P networks like Bit Torrent. 
 The concept is that I want people to be able to download the files, but, if 
they want to view them, then they have to go through me to get the key. The 
reason I want to use P2P is so that I don't have to eat the costs of 
transferring the data. 
 Braun
 

 On 9/13/05, Ronan Cunniffe <rcunniff at stp.dias.ie> wrote: 
> 
> 
> 
> On Tue, 13 Sep 2005, Proinnsias Breathnach wrote:
> 
> > The best way is to encrypt on a per user basis, using their keys (the
> > one they care about not giving out). The problem is then that it can't
> > really work too well on P2P networks. John's solution is quite elegant -
> > especially if coupled with a memory-resident method of decryption on the
> > user side. This decryption being based upon the users' personal gpg key
> > (the one they won't leak on P2P)
> 
> Won't a motivated user just create a throwaway identity with a GPG key,
> then stick said GPG key on the same P2P network?
> 
> What O'Reilly & Associates did with Safari was rely on *ongoing* value
> to prevent people leaking their account details to anyone else. The use
> an individual means to make of the service *tomorrow* is the disincentive
> to screw ORA today.
> 
> But Braun is being quiet about the exact nature of his problem, so I've no
> idea if this is relevant...
> 
> Ronan
> --
> Irish Linux Users' Group
> http://www.linux.ie/mailman/listinfo/ilug/
> 
>