From: Stanton McCandlish <mech@eff.org>
Date: Tue, 7 Jun 94 18:25:41 PDT
To: cypherpunks@toad.com (cypherpunks)
Subject: Email security user survey (fwd)
Message-ID: <199406080124.VAA23163@eff.org>
MIME-Version: 1.0
Content-Type: text/plain


Forwarded message:
Subject: Email security user survey
Date: Fri, 03 Jun 1994 13:22:32 -0700
From: John Gilmore <gnu@cygnus.com>

Let's give Dana some data about PGP users.  Please spread...

	John

------- Forwarded Message

Subject: Request for info from Dana C. Ellingen
Date: Fri, 03 Jun 94 09:33:50 -0400
From: Mark S Feldman <feldman@tis.com>

- -----BEGIN PRIVACY-ENHANCED MESSAGE-----
Proc-Type: 4,MIC-CLEAR
Content-Domain: RFC822
Originator-ID-Asymmetric: MFMxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNRDE
 kMCIGA1UEChMbVHJ1c3RlZCBJbmZvcm1hdGlvbiBTeXN0ZW1zMREwDwYDVQQLEwh
 HbGVud29vZA==,06
MIC-Info: RSA-MD5,RSA,UrO04KAws35IxkK3iROrfIsWLHc5CXq84Wu9fyJBEAc
 4rwYiHlmfKYrc6j2FtIxqts+MT/KT4/De/Qr79Bdg4OW33TZ8umY4QqYmVJlWGvf
 5y7686g8+EyTEyku15Pi8


Dana C. Ellingen <ellingen@netcom.com> is preparing a special issue of
the Ferris E-Mail Analyzer on security in electronic mail, and would
like to get your input.  If any of you would like to respond to him,
send him email or get in touch with him as follows:

  Dana C. Ellingen                   Electronic Commerce Consultant
  415.726.9712 (telephone); 415.726.3093 (FAX); ellingen@netcom.com
  410 Laurel Ave., Half Moon Bay, CA  94019-1674

Following are his questions.

 Mark




Note that all answers will be "not for attribution," and will be
melded into the overall issue.

Vendors, I would like the names of several happy users of your
product, even if they have just chosen it and it is not yet installed.
I am interested in why they chose to make this move now rather than
later, as well as how happy they may be with your product.

Questions for Email Security users, for Ferris E-Mail Analyzer:

A - What form of security does your firm use for electronic mail and 
messaging?

B - Given the state of turmoil in the industry, why did you choose to be 
an "early adopter," and to put security into your forms and 
messaging applications?  Why now?

C - What problems have you had, having added security?

D - What compromises have you had to make to add security?

E - Product support:  Do you currently use (or are you considering) a 
commercial product for secure EM?  Which one?  Why?  
Are you happy with the support you are getting?

F - Interoperability:  Do you currently or do you want to exchange 
secure EM with people outside of your organization?  How do you 
deal with the interoperability problem?

G - International:  Do you have overseas offices, or do you exchange 
secure EM with persons outside of the US?  Are you concerned about 
having to cut back on your security to do this?

H - Certificates:  Do you issue certificates to your users?  

I - Certificates:  If someone else issues certificates, how do 
establish trust with that organization?

J - Certificates:  How do you verify the authenticity of a 
digital signature on a document that you receive?

K - Policy:  Does your firm have a written policy on electronic 
mail?  Can your firm read its employees' EM?  

L - Escrowed keys:  Do you keep copies of the private keys of the 
individuals in your firm?  Do you think that you should, or that 
you have the right to do so?

M - Integration:  How important is it that you have a product that is 
fully integrated with your existing mail system?

N - What did I leave out?  What else do you want to discuss?
- -----END PRIVACY-ENHANCED MESSAGE-----

------- End of Forwarded Message