1997-01-26 - Re: Scandinavian Goverments provide PGP to postal customers…

Header Data

From: Bill Stewart <stewarts@ix.netcom.com>
To: Hugh Daniel <hugh@ecotone.toad.com>
Message Hash: f3ef21ed3196e0b1512ef91e0d4c62a4fdb8ab7d88c3a0b99f96838f5c0f3613
Message ID: <3.0.1.32.19970125171733.0063b5b0@popd.ix.netcom.com>
Reply To: N/A
UTC Datetime: 1997-01-26 01:18:07 UTC
Raw Date: Sat, 25 Jan 1997 17:18:07 -0800 (PST)

Raw message

From: Bill Stewart <stewarts@ix.netcom.com>
Date: Sat, 25 Jan 1997 17:18:07 -0800 (PST)
To: Hugh Daniel <hugh@ecotone.toad.com>
Subject: Re: Scandinavian Goverments provide PGP to postal customers...
Message-ID: <3.0.1.32.19970125171733.0063b5b0@popd.ix.netcom.com>
MIME-Version: 1.0
Content-Type: text/plain


At 06:29 PM 1/24/97 -0800, Hugh Daniel wrote:
>>    Based on PGP, with no "third-party" key holder, the Nordic system
>>    uses unbreakable RSA-algorithm encryption with a 1024-bit key.
>>    However, some hardware is required. Because the key is on a
>>    smartcard, users must have smartcard readers installed on their
>>    computers, which aren't yet widely available. But Pdr Andler of
>>    Finnish Hewlett Packard says that later this year, smartcard readers

Guess what - it's still got "key escrow"!  If you've got a smartcard
that holds your key, then you've got something well-defined that can
be subpoenaed....  It's better than Yankee-style giving the government your
keys
in advance, but it's still key escrow.

On the other hand, it's voluntary, and if it interoperates with
Real PGP, then great - but will there be an expectation that you need to have
your key signed by The Post Office to use it?

#			Thanks;  Bill
# Bill Stewart, +1-415-442-2215 stewarts@ix.netcom.com
# You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp
#     (If this is a mailing list, please Cc: me on replies.  Thanks.)






Thread