home *** CD-ROM | disk | FTP | other *** search
- Xref: sparky sci.crypt:5825 alt.security.pgp:262
- Newsgroups: sci.crypt,alt.security.pgp
- Path: sparky!uunet!spool.mu.edu!uwm.edu!linac!att!att!ulysses!ulysses!smb
- From: smb@research.att.com (Steven Bellovin)
- Subject: Re: PGP as a World Standard
- Message-ID: <1992Dec18.021308.10817@ulysses.att.com>
- Date: Fri, 18 Dec 1992 02:13:08 GMT
- References: <1992Dec17.235959.1@nowhere.mil>
- Organization: AT&T Bell Laboratories
- Lines: 25
-
- In article <1992Dec17.235959.1@nowhere.mil>, nobody@nowhere.mil writes:
- > David Sternlight (strnlght@netcom.com> says:
- > >Read my lips. PGP1.0 was contraband in the U.S., so much so that the
- > >author pulled out. It was illegally exported. PGP2.0 was based on it.
- > >Thus the Europeans who use it don't have clean hands, regardless of
- > >the state of the law there.
- >
- > Which is interesting, considering an entry on a PGP public key ring I
- > received recently:
- >
- > Type bits/keyID Date User ID
- > pub 1024/B33E65 1992/09/24 David Sternlight <strnlght@netcom.com>
- >
- >
- > I guess it's "do as I say, not as I do", eh, Dave?
-
- Ah, I love anonymous postings. Umm -- who signed that key? There's
- this about certificates (i.e., about the much-maligned PEM) -- there's
- a trail of evidence and authentication.
-
- Quick -- how many people know how to generate a key with an arbitrary
- name? I thought so...
-
- Btw -- the key might be genuine. But an anonymous posting sure doesn't
- give me any reason to think so.
-