1995-12-15 - Re: NIST GAK meeting writeup, LONG part 3 of 3

Header Data

From: futplex@pseudonym.com (Futplex)
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Message Hash: 9bfef7b362e14dd75c30d15e9ffad22c4400821bd37a2f6f42b3259e818f1ca5
Message ID: <199512150148.UAA00854@opine.cs.umass.edu>
Reply To: <m0tQMvq-00090LC@pacifier.com>
UTC Datetime: 1995-12-15 05:49:46 UTC
Raw Date: Fri, 15 Dec 1995 13:49:46 +0800

Raw message

From: futplex@pseudonym.com (Futplex)
Date: Fri, 15 Dec 1995 13:49:46 +0800
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Subject: Re: NIST GAK meeting writeup, LONG part 3 of 3
In-Reply-To: <m0tQMvq-00090LC@pacifier.com>
Message-ID: <199512150148.UAA00854@opine.cs.umass.edu>
MIME-Version: 1.0
Content-Type: text/plain


jim bell writes:
> It _is_ less voluntary, because it interferes with my right to escrow my key
> with an organization that is willing to take the dispute to arbitrary levels
> of uncooperativeness with the government.  I might insist, for example, that
> the organization only store the key outside the country (beyond the reach of
> US Courts) and require MY PERMISSION for them to release it to the
> government.  I might also insist that they further encode the key so that
> only an independent foreign organization (out of reach of US courts) could
> provide the key to decrypt it.
> 
> If key escrow is REALLY REALLY REALLY "voluntary", then such arbitrary
> restrictions should be do-able.

Unless I've missed something large, you can have an _uncertified_ key escrow 
agent store your keys in Fidel Castro's beard, and only release them with
written permission from your goldfish. 

Whether or not you use a certified key escrow agency would remain your 
choice, AFAIK.

I'm not expressing support for the certification standards that have been
presented. But I don't consider it cause for great alarm that the USG wants
to play in the escrow agent rating bureau business.

-Futplex <futplex@pseudonym.com>





Thread