[IP] more on Are the encryption wars really over? Maybe not
Begin forwarded message:
From: Ed Gerck <egerck@xxxxxxx>
Date: May 27, 2005 8:33:46 AM EDT
To: dave@xxxxxxxxxx
Cc: Ip ip <ip@xxxxxxxxxxxxxx>
Subject: Re: [IP] Are the encryption wars really over? Maybe not
Declan,
I guess we all know what is blocking email encryption. We can't say it's
legislation, anymore. It's just too darn difficult to do. Downloading
Java applets doesn't help much, and you end up having to do your own
key management even if you pay for a cert.
As I have commented elsewhere (crypto list), the public-key model is
also backwards for email. It is similar to having to ask you for an
envelope
before I can send you postal mail, and trusting YOUR envelope to be
secure
for MY document! OTOH, using "password security" to encrypt email is not
secure at all and just makes the recipient of your emails open to
spoofing
and phishing.
I invite anyone to try without cost a new model called ZMail, which
provides
end-to-end encryption without the user having to bother with anything
crypto,
even though it uses keys and certs. After all, why should anyone
bother to
learn and use cryptography principles, key management, key validation
and other
technical concepts when all you want to do is send and receive email
without
problems?
BTW, there is no key escrow. The user's login credentials are not stored
anywhere either, not even the sysadmin could break the user's privacy.
To try, please go to https://zsentry.com/mail/register_user.html
Comments are welcome.
Cheers,
Ed Gerck
From: Declan McCullagh <declan@xxxxxxxx>
Date: May 25, 2005 10:09:53 PM EDT
To: politech@xxxxxxxxxxxxxxx
Subject: [Politech] Are the encryption wars really over? Maybe not
[priv]
...
I wouldn't be surprised if such a law would permit non-escrowed
crypto to be used to secure communication streams while
requiring .gov backdoors in crypto used for hard drive or file
encryption. In other words, GPG and PGPdisk might become verboten.
Programmers might sensibly scoff, but that's the way the Feds think.
--
________________________________________________
I use ZSentry Mail Secure Email
https://zsentry.com/R/index.html/edgerck@xxxxxxx
-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
http://v2.listbox.com/member/?listname=ip
Archives at: http://www.interesting-people.org/archives/interesting-people/