From: amp <Alan.Pugh@internetMCI.COM>
Date: Mon, 19 Feb 1996 10:19:48 +0800
To: Laurence Lundblade <lgl@qualcomm.com>
Subject: Re: A brief comparison of email encryption protocols
Message-ID: <01I1DEYY5X76985M5A@MAIL-CLUSTER.PCY.MCI.NET>
MIME-Version: 1.0
Content-Type: text/plain


-- [ From: amp * EMC.Ver #2.3 ] --

-----BEGIN PGP SIGNED MESSAGE-----

LL> The Key Distribution System
LL> ---------------------------
LL> A lot of components may go into this (protocols, client/server
LL> architectures, local key stores) and it is probably the most
complicated
LL> part of any system.  Some options are:
LL>   * distribution of keys manually via e-mail
LL>   * automatic non-interactive lookup of keys from a server
LL>   * interactive browsing of a key store for keys
LL>   * revocation lists or none
LL>   * online certificate verification via a secure channel
LL>   * certificate caching

i would add, 
      * key expiration

LL> Probably the best thing to say, is that there's a lot of work to do
LL> here.

yup.


amp@pobox.com
PGP Key = 57957C9D
PGP FP = FA 02 84 7D 82 57 78 E4  E2 1C 7B 88 62 A6 F9 F7

#!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL
$m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa
2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print
pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length$n&~1)/2)
February 18, 1996   17:28


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMSeoNYdTfgZXlXydAQGPQwf+IpKlmyt91gRtmdOcWeMZzX94qtppbiPB
wm1Xb6prxDgzI0jxuh+SnHMgEuvSa/flW6kqAkGQkZd7TsyX/J5lKA6fZB0umH1M
0LNj/Y9pubwbquHsd2EVyCoPe+f9+WO0HLCTEjd4yUJsBU6DDWGf61vxAvsUCyMK
F6Dpv7MPJBgNaHwsZOIgKR8yizkaFOzhgescm8a6FCVq/0iblTbZNDPr5EyMjIQC
VuZCDefcP5xQW9ve9yTidGbVhvYP0rKvtrov+U028U0q0ch2pztodpB9LCpXKhAh
/YFyqyTEqZLgNrwrhAE5N1qRpG7a34XJRLagMi5rIoMs+QAjps2k1w==
=/nJw
-----END PGP SIGNATURE-----