From: Bruce Schneier <schneier@counterpane.com>
Date: Thu, 9 Oct 1997 22:26:34 +0800
To: Jon Callas <minow@apple.com
Subject: Re: What's really in PGP 5.5?
In-Reply-To: <v0300780ab0609577728b@[209.98.13.223]>
Message-ID: <v03007803b0629512ae06@[209.98.13.73]>
MIME-Version: 1.0
Content-Type: text/plain



At 4:33 PM -0500 10/8/97, Jon Callas wrote:
>At 08:48 PM 10/7/97 -0500, Bruce Schneier wrote:
>   Jon Calis wrote:
>   >Also, we have three encryption products: PGP freeware, PGP for Personal
>   >Privacy, and PGP for Business Security. Corporate Message Recovery is
>   >included *only* in PGP for Business Security. It is not, and never will
>   >be, in either the freeware or the Personal Privacy product.
>
>   If this is true (and I have no reason to believe it isn't), then why is the
>   key escrow code written (although not turned on) in the source code for 5.0
>   that was posted internationally from PGP?
>
>Bruce, I understand that you don't like any form of data recovery, but
>there is no key escrow in PGP. Perhaps we should talk about this on the phone.

Sure.  Please call.  Your CEO called me on Monday, and he tried to tell me
that it wasn't key escrow because you weren't saving copies of any keys.
If you're just going to call to split those sorts of hairs, don't bother.
I'm interested in hearing how your key escrow system works; I've already
been told why you put it in.

Bruce

**********************************************************************
Bruce Schneier, President, Counterpane Systems     Phone: 612-823-1098
101 E Minnehaha Parkway, Minneapolis,MN  55419       Fax: 612-823-1590
                                            http://www.counterpane.com