From: "William H. Geiger III" <whgiii@invweb.net>
Date: Wed, 7 Jan 1998 02:16:27 +0800
To: Ray Arachelian <sunder@brainlink.com>
Subject: Re: fwd: The Swedes discover Lotus Notes has key escrow! (Win Treese)
In-Reply-To: <Pine.SUN.3.96.980106120946.2112D-100000@beast.brainlink.com>
Message-ID: <199801061821.NAA16341@users.invweb.net>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

In <Pine.SUN.3.96.980106120946.2112D-100000@beast.brainlink.com>, on
01/06/98 
   at 12:11 PM, Ray Arachelian <sunder@brainlink.com> said:

>Lotus, a subsidiary of the American computer giant IBM, has negotiated a
>special solution to the problem.  Lotus gets to export strong
>cryptography with the requirement that vital parts of the secret keys are
>deposited with the U.S. government.  ``The difference between the
>American Notes version and the export version lies in degrees of
>encryption.  We deliver 64 bit keys to all customers, but 24 bits of
>those in the version that we deliver outside of the United States are
>deposited with the American government.  That's how it works today,''
>says Eileen Rudden, vice president at Lotus.

I have 2 problems with this outside of the fact they are doing it:

1) 64 bits is too weak.

2) why should we trust them that it is only the export versions they are
giving the 24bit to the government on??

Yet *another* reason not to use Lotus Bloats.

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://users.invweb.net/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html                        
- ---------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNLJ0AY9Co1n+aLhhAQH/ugP/c98Sq7gCiXV8P045MyJZbcGmJGmD1IeX
SgQAhCrThv8bmou+stgJfoYClaDQ1ozbyGyCuJXgCgp/AHhUjEuDLGxIgAzRTuHX
V3vNSvNhW3FHMVSG1+UGylchaZzwhyo036frJrc3zxGXPGY142Y1BEW+4Zeoa1NN
YPw0QYYnxnY=
=k6PK
-----END PGP SIGNATURE-----