From: Adam Back <aba@dcs.ex.ac.uk>
Date: Sat, 14 Nov 1998 23:18:46 +0800
To: cypherpunks@cyberpass.net
Subject: Will Price (NAI employee) on KRA
Message-ID: <199811141455.OAA30151@server.eternity.org>
MIME-Version: 1.0
Content-Type: text/plain




This comment on NAI's KRA(P) membership by Will Price
<wprice@pgp.com>, a crypto type who works for PGP was forwarded to the
ukcrypto list by Ian Goodyer (uk-crypto list admin).  Not sure where
it was posted originally, or perhaps Will asked Ian to forwarded it.

Adam

------- Start of forwarded message -------
Date: Sat, 14 Nov 1998 11:43:07 +0000
To: ukcrypto@maillist.ox.ac.uk
From: "Ian D. Goodyer" <goodyer@well.ox.ac.uk>
Subject: Re: Escrow - news

Here is a response from Will Price who was formally from PGP inc and now of
course is with NAI.   ian

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've commented about this on this list before I believe.  This appears
to be a case of really old news suddenly being dredged up for no
apparent wholesome reason -- which strikes me as quite odd because
Wired was apparently so eager to break this ancient story that they
didn't wait to ask anyone from NAI about it.

NAI being listed on the KRA page is *solely* a result of our TIS
acquisition.  I really doubt anyone here actually called some KRA
person and officially renewed our membership.  Frankly, I doubt anyone
here actually knows who to talk to there -- if there even is a
"there".  As I have said before, due to the TIS acquisition, NAI now
has a bunch of products which contain key escrow features. 
Eliminating or modifying these features such that they work in a less
big brother-like fashion will take significant time -- indeed entire
TIS products were based around managing key escrow infrastructures. 
Don't get me wrong, TIS had a lot of other great products, but it will
take time to redesign and rethink some of them in the context of
export and key escrow.  I'm not sure there's much point in withdrawing
from KRA when those products still exist.

These issues have no effect whatsoever on the PGP group.  As always,
we continue to publish full source code which effectively solves all
the export issues for us.


Robert Guerra wrote:
> I just picked this up from another mailing list that I am on.
Perhaps the
> folks at NAI can clarify things?
> 
> - ---------- Forwarded message ----------
> Date: Fri, 13 Nov 1998 10:55:06 +0000
> From: Ross Anderson <Ross.Anderson@cl.cam.ac.uk>
> Reply-To: ukcrypto@maillist.ox.ac.uk
> To: ukcrypto@maillist.ox.ac.uk
> Subject: Escrow - news
> 
> (1) Network Associates has quietly rejoined the Key Recovery
Alliance
> - - see http://www.kra.org.

- -- Will
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2

iQA/AwUBNkySo6y7FkvPc+xMEQIuygCfYosXGISVrKd4dYWwM8xOrVdd4WAAn3dT
XvDG6FMapZpjmvjucF67fwM5
=xa+R
-----END PGP SIGNATURE-----


Will Price, Architect/Sr. Mgr., PGP Client Products
Total Network Security Division
Network Associates, Inc.
Direct  (408)346-5906
Cell/VM (650)533-0399
<pgpfone://cast.cyphers.net>

PGPkey: <http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0xCF73EC4C>
------- End of forwarded message -------