There's a related issue that I'd like to bring up. Suppose someone
in France (or Bulgaria, or wherever) gets RIPEM, including RSAREF,
via anonymous FTP (like I did).
1) Are they at risk, or the FTP site owner?
2) If I post my RIPEM public key, am I at risk?
3) If the furriner sends me a message encrypted with my public key,
can I decrypt it legally?
4) If I send a RIPEM-encrypted message to a furriner who sent me a
public key to use, and who assures me that he has independently
developed a system for decrypting it, am I at risk?
The way this is being handled is baffling to me. Why are RIPEM and RSAREF
available via anonymous FTP?
Peter