cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1997-10-27 - Re: PGP, Inc.–What were they thinking?

Header Data

From: Lucky Green <shamrock@cypherpunks.to>
To: Adam Back <aba@dcs.ex.ac.uk>
Message Hash: 2edf4e0df66191ef898447ed9c51012921ee453b96078046f666e48629fac632
Message ID: <Pine.BSF.3.96.971027082056.10658E-100000@pakastelohi.cypherpunks.to>
Reply To: <199710241342.OAA01491@server.test.net>
UTC Datetime: 1997-10-27 07:26:23 UTC
Raw Date: Mon, 27 Oct 1997 15:26:23 +0800

Raw message

From: Lucky Green <shamrock@cypherpunks.to>
Date: Mon, 27 Oct 1997 15:26:23 +0800
To: Adam Back <aba@dcs.ex.ac.uk>
Subject: Re: PGP, Inc.--What were they thinking?
In-Reply-To: <199710241342.OAA01491@server.test.net>
Message-ID: <Pine.BSF.3.96.971027082056.10658E-100000@pakastelohi.cypherpunks.to>
MIME-Version: 1.0
Content-Type: text/plain



On Fri, 24 Oct 1997, Adam Back wrote:
> 
> If this is the case, I reckon it's still better to just escrow their
> comms keys locally.  Put them all in the company safe, whatever.  To
> go with this kind of a company with this kind of policy, I would
> presume that sending or receiving super-encrypted messages would would
> be a sackable offense.

Adam,
How does your system prevent the employer  from fabricating forged
signatures in a PK system that uses the same key for signing and
decrypting? And if you don't use such a system, then how do you deal with
future versions of the software that will allow the user to swap DH keys
from underneath the ElGamal keys?

Thanks,

-- Lucky Green <shamrock@cypherpunks.to> PGP encrypted email preferred.
   "Tonga? Where the hell is Tonga? They have Cypherpunks there?"

Thread