1994-05-16 - Re: PGP 2.6 and the future

Header Data

From: allan@elvis.tamu.edu (Allan Bailey)
To: perry@imsi.com
Message Hash: 184d43429d1c598417feff7cf0f57c4edc4eafa3879538cdae02e8d086f45081
Message ID: <9405162042.AA00837@elvis.tamu.edu>
Reply To: <9405162013.AA00693@elvis.tamu.edu>
UTC Datetime: 1994-05-16 20:42:25 UTC
Raw Date: Mon, 16 May 94 13:42:25 PDT

Raw message

From: allan@elvis.tamu.edu (Allan Bailey)
Date: Mon, 16 May 94 13:42:25 PDT
To: perry@imsi.com
Subject: Re: PGP 2.6 and the future
In-Reply-To: <9405162013.AA00693@elvis.tamu.edu>
Message-ID: <9405162042.AA00837@elvis.tamu.edu>
MIME-Version: 1.0
Content-Type: text/plain



bludy emacs VM doesn't stop you from sending an unsigned message yet.

i'm going to have to make a binding for that tonight....  grrr...

-----BEGIN PGP SIGNED MESSAGE-----

"Perry E. Metzger" writes:
>
>Allan Bailey says:
>> I'm willing to wager that 2.6 (and maybe 2.5) MIT'd PGP versions
>> are hacked by the NSA to put in a backdoor.
>>                                 ^^^^^^^^^^ (emphasis added.)
>> 
>> I'll bet you a C-note, Perry.
>
>Done for $100.
>
>> Now how do you propose to prove or disprove this?
>
>The commonly selected way to settle such things is to select a neutral
>referee to adjudicate based on available evidence. The source code is
>public, so it should it should be trivial to read it and make a
>decision as to whether anything untoward has been done. I'll accept
>any reasonably expert referee -- my selection of choice would be Hal
>Finney since he is a well known cypherpunk, is strongly familiar with
>the code and would recognise any tampering. 

Well, Hal wanted to bet me too, but you were first.  If he's still
willing, I'll agree to him also. 

>Tampering may be defined
>given what you are claiming as the presense of what a reasonable
>cryptographer would refer to as a "back door". 

Agreed.

>Once we've settled on a judge and they've
>accepted the charge (we may need to pay the person for their time), we
>present our evidence to the person and allow them to make a decision.

Agreed.

>I'll happily bet any larger sum, too, if you like. 

I'm a University programmer/sysadmin.  I.e., poor, but with a good
InterNet connection. :)

>I'd also request
>that a neutral third party hold the stakes. At your choice the party
>can be the judge or another individual mutually acceptable.

Sounds fine with me.  If Hal, or another agreed upon judge is willing,
I'll send my cheque in.

- --
Allan Bailey, allan@elvis.tamu.edu          | "Freedom is not free."
Infinite Diversity in Infinite Combinations | allan.bailey@tamu.edu
Esperanto: MondLingvo, lingvo internacia.


-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLdfadU19fA0AcDy9AQF6MgP+LNU5cbOIko4EyIXc8xkA3h3vQf6UOOIA
RsysJhbY8NWjtBZ2yI3yxewrLecb0+448tLmFjuPDM+ZlORcP7OPS30qMOzuO8oe
VZC/nWm+SvD2Rgh5T8pI5RjcbD8SLozBlcwMVdvnmEyxngCaRLmlBoMLWqmeom9k
RJ6PD0FHYKw=
=8pmK
-----END PGP SIGNATURE-----






Thread