From: "David Lesher / hated by RBOC's in 5 states" <wb8foz@wauug.erols.com>
Date: Thu, 9 Jan 1997 16:36:14 -0800 (PST)
To: kkirksey@appstate.campus.mci.net (Ken Kirksey)
Subject: Re: Key Escrow Good, GAK Bad
In-Reply-To: <199701092131.QAA00797@aus-c.mp.campus.mci.net>
Message-ID: <199701100019.TAA25077@wauug.erols.com>
MIME-Version: 1.0
Content-Type: text/plain


Ken Kirksey sez:
> 
> I'll give an example.  About a year ago, my boss wanted to protect his 
> file of annual financial projections for the company from prying eyes on 
> our Macintosh network.  I installed CurveEncrypt on his machine, showed 
> him how to use it, and gave him the standard lecture on choosing a good 
> passphrase.  I stressed that he needed to chose a passphrase easy to 
> remember, because if he forgot it, there was no way to get his file back.
> 
> Well, he forgot his passphrase.  

There's a low-tech solution. There's a stock GSA form for recording
a container [safe] combo. You seal it up, put it in an envelope, you
& witness sign across the flap. You store same in another container,
such as in the security office. [THAT safe combo is usually kept
in a 24-hour manned location such as the ECC or such.]

Think along those lines, perhaps.

-- 
A host is a host from coast to coast.................wb8foz@nrk.com
& no one will talk to a host that's close........[v].(301) 56-LINUX
Unless the host (that isn't close).........................pob 1433
is busy, hung or dead....................................20915-1433