ietf-openpgp
[Top] [All Lists]

Re: negative security aspects of GAK compliance

1997-10-12 05:59:12

Adam Back <aba(_at_)dcs(_dot_)ex(_dot_)ac(_dot_)uk> wrote:
As I have pointed corporate access to stored email can be acheived
with similar amounts of snooping enforceability by having the PGP5.5
mail client store to an escrowed communications key after decryption,
                                   ^^^^^^^^^^^^^^

Typo: that should be "storage key".

I would be interested to see anyone refute this security argument from
a security point of view.

And I am very interested to hear arguments against the logic of that
message.

Adam
-- 
Now officially an EAR violation...
Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/

print pack"C*",split/\D+/,`echo "16iII*o\U(_at_){$/=$z;[(pop,pop,unpack"H*",<>
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

<Prev in Thread] Current Thread [Next in Thread>