From: Anonymous <nobody@replay.com>
Date: Thu, 3 Dec 1998 22:54:54 +0800
To: cypherpunks@toad.com
Subject: No Subject
Message-ID: <199812031421.PAA00408@replay.com>
MIME-Version: 1.0
Content-Type: text/plain



Is anyone aware of any critical evaluations 
performed on the security of the Network Associates 
(a.k.a. McAfee) PGP for Personal Privacy?  Traditionally, 
PGP source code has always been available for 
evaluation by the Net community, but this isn't the 
case with the newer commercial versions.

Additionally, and this is a bit paranoid, but PGP in 
the past has come with digitally signed files to 
authenticate the integrity of the files.  Once again, 
commercial versions offer no such guarantee that the 
software hasn't been tampered with between the factory 
and the store shelves.

Comments?