Next: Future Work
Up: Limitations and threats
Previous: Threats to publisher anonymity
Unlike Anderson's Eternity Service [2] Publius
allows a publisher to delete a previously published
document. An individual wishing to delete a document
published with Publius must possess the document's
URL and password. An adversary who knows the publisher of
a document can apply so called
``Rubber-Hose'' Cryptanalysis [21] (threats,
torture, blackmail, etc) to either force the publisher
to delete the document or reveal the document's password.
Of course the adversary could try to force the
appropriate server administrators to delete the Publius Content
he wants censored. However when Publius Content is
distributed across servers located in different
countries and/or jurisdictions such an attack can
be very expensive or impractical.
Avi Rubin
2000-06-13