From: iang@cs.berkeley.edu (Ian Goldberg)
Date: Fri, 19 Jul 1996 04:21:59 +0800
To: cypherpunks@toad.com
Subject: Re: overseas PGPfone and Netscape
In-Reply-To: <01BB74A5.CDC6BC00@JPKroepfli.S-IP.EUnet.fr>
Message-ID: <4slmrl$a80@abraham.cs.berkeley.edu>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

In article <01BB74A5.CDC6BC00@JPKroepfli.S-IP.EUnet.fr>,
Jean-Paul Kroepfli  <JeanPaul.Kroepfli@ns.fnet.fr> wrote:
>I've seen some threads about (1) the new PGPfone, (2) the new US-version of Netscape and leakage.
>So my question:
>[Important] Do you know some non-US URL with the latest version of PGPfone for Win?
>(I monitored the usual European repositories quasi day to day, but it was always the old version)
>[Less important] Ibid. for the new US-Netscape (with full 128-SSL)
>(I suppose there is a copyright problem for such a -hum- mirroring)
>Best regards,
>Jean-Paul

I haven't tried to download it myself, yet (I'm on the wrong side of a
slow link <plug>(though it's faster since I got my new ZyXEL
yesterday)</plug>), so maybe this is explained for me, but does netscape
publish checksums for their US binaries?

This isn't just an issue of making sure your copy wasn't munged in transit;
without checksums, what's stopping netscape from embedding the info you
provide in the binary before shipping it to you, so that if it shows
up on hacktic, they know who did it?

Could various people with various architectures post MD5 or SHA1 hashes
of the files they downloaded?

   - Ian

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMe5elUZRiTErSPb1AQF1DQP/b8o5CZvG49kXY+N9SCNEN+72oX/l6NrC
9WX6UqoY2Qr+OdWLTcYVwUjVqFwMnSFaY9bcTpf8/6zkeDznk2RfDPI1Idw/W80N
OxqSZv0Kp3Ng8ibpRvOXkEKLvu/WXlnUMldLv4VQginYvNPEvKkLOiRNpMnArNwj
+aohOGJ03/8=
=Xni4
-----END PGP SIGNATURE-----