ietf-openpgp
[Top] [All Lists]

Re: Key Escrow Issues

1997-10-10 00:47:42
* Jeffrey Gold wrote:
2. It is critical for those same businesses to be independent of
  the loss of any one employee - if he is the ONLY ONE who knows
  the password for a critical file.  Key Escrow is a valid
  solution to guard against this circumstance.  PGP version 5.5
  which has this feature is likely to be a "hot seller".

PGP 5.5 does not distingush between communication keys and storage keys.
Communication keys MUST NOT GAK.

3. PGP 5.5 appears to allow a single individual with a "Master"
  key access to ALL encrypted files.  IMHO, this gives that
  employee too much power.  It also leaves the business vulnerable
  to improper behavior by that employee.  Say, jumping ship with
  all the secrets.

And for all messages in the past and future. This does not match the courts
wiretrap desicion.


<Prev in Thread] Current Thread [Next in Thread>