Defences against trad. attacks Replay of harvested addresses web, usenet signed addresses not exposed infected PCs signed addresses ARE exposed Defences covered in detail later Dictionary attacks cryptography prevents forgery How strong must it be to "prevent"?