From: Ryan Anderson <randerso@ece.eng.wayne.edu>
Date: Mon, 6 Oct 1997 04:49:43 +0800
To: Tim May <cypherpunks@cyberpass.net
Subject: Re: New PGP "Everything the FBI ever dreamed of"
In-Reply-To: <199710051653.MAA10344@users.invweb.net>
Message-ID: <3.0.2.32.19971005163708.006d25e0@ece.eng.wayne.edu>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

At 12:06 PM 10/5/97 -0700, Tim May wrote:

>>Claiming that they are doing the work of Big Brother is a cheap-shot and
>>uncalled for.
>
>(Ironic coming from a frequent issuer of cheap shots.)
>
>
>It is the work of Big Brother, as Garfinkel, Zimmermann, and I agree, when
>it becomes a default that additional recipients are automatically copied on
>encrypted mail. It may be useful to companies, but it's still dangerous.

Look a bit closer at the announcments:  I believe they said that they would 
compile a new version for each key that they used.  So it's not even likely 
that this could become a widespread feature.

For this to be useful for GAK, you'd have to change all copies in existence 
to encrypt for this key.  (And of course, then you'd have a very simple key-
id to search for in the executable and modify, say to encrypt back to 
yourself, and you'd have circumvented this little problem)

If you want PGP to get into widespread use in business, you have to provide 
features that they will require.  Frankly, this is good for encryption, to 
provide features that business needs.  With this, hopefully the business 
lobby will fall in line with the no-regulation-on-crypto lobby, and get all 
of us the results we want.

Phil is never going to release a copy of PGP that has built-in GAK.  We know 
that.  This is MAK (Management Access...) in a secure manner, which is better 
than the other methods of internal escrow.
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQCVAwUBNDf6czc3ytqHnNyNAQF80AP/Vm5uO8nLqnDShxu6/o9HArZNgvb8txoR
JV3ANvTd7fHjpCMHEzSdUgyEYspX8uRP6D6qR2nAt3KgLwlVpNcLgQO6mUd4E9av
naGgt7jHPcJ1tvFu8yr6mUFtXZ7yvROnOpkRXTv7HR4vaPvOS5Z8G60WZXhJRw3S
FkFh7ADJiRk=
=PafJ
-----END PGP SIGNATURE-----


-----------------------------------------------------------------------
Ryan Anderson - <Pug Majere>     "Who knows, even the horse might sing" 
Wayne State University - CULMA   "May you live in interesting times.."
randerso@ece.eng.wayne.edu         
PGP Fingerprint - 7E 8E C6 54 96 AC D9 57  E4 F8 AE 9C 10 7E 78 C9
-----------------------------------------------------------------------