From: khijol!erc (Ed Carp [Sysadmin])
Date: Mon, 5 Dec 94 08:11:08 PST
To: lmccarth@ducie.cs.umass.edu (L. McCarthy)
Subject: Re: public accounts / PGP / passphrases
In-Reply-To: <199412051024.FAA00972@bb.hks.net>
Message-ID: <m0rEff4-0004G1C@khijol.uucp>
MIME-Version: 1.0
Content-Type: text


-----BEGIN PGP SIGNED MESSAGE-----

> Could you clarify where the `clean' copy of the hash of the OS is being
> stored, if not on the machine in question ?

On CD-ROM, or on removeable media which *you* control access.

> I must confess that I'm not personally prepared to push my machine into an
> early grave by rebooting before I sign or encrypt anything. Besides, I'd be
> pushing _myself_ into an early grave if I did that. YMMV.
> 
> I have a 386 at home, on which I suppose I could run PGP, but that doesn't
> help. Why ?  Simply because going home to dial in is a major inconvenience.
> Leaving aside my unwillingness to stay home in the evening just to use my
> public account, it's utterly impossible for me to leave work during the
> day whenever I want to use PGP. The only solution I can imagine is to keep
> a notebook computer running Linux at work, and dial in to the DECstation
> five feet away from my desk at work. I've no idea how to convince the tech
> staff here to add a dedicated phone line to my lab for this purpose. Any
> better suggestions on using PGP safely during the workday ?

What's the matter with running a serial cable from your laptop to the DEC?
- -- 
Ed Carp, N7EKG    			Ed.Carp@linux.org, ecarp@netcom.com

Finger ecarp@netcom.com for PGP 2.5 public key		an88744@anon.penet.fi
                       ** PGP encrypted email preferred! **

"What's the use of distant travel if only to discover - you're homeless in
your heart."  --Basia, "Yearning"

-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAwUBLuM2cCS9AwzY9LDxAQHoVgP/XgRWz/wzTCfsmZ12zBedmb8ittibCFUd
2A/Gy0UlWm5eeLTK3+062pCOOYOVbjvobJmcrW2xc5432xEfBWK9XCEhdpTj1AG6
+hnsK4MYIe3OtacSJpdfQCAbFixd4Smo9PsLTcyXsfS2SHh2OutjqIpHEGJcCIHQ
6iapsOF9BQQ=
=Uldx
-----END PGP SIGNATURE-----