PGP vs. RIPEM

[nobody@rosebud.ee.uh.edu]

-----BEGIN PGP SIGNED MESSAGE-----

( >>>>>>'s inserted for the benefit of George Gleason ;-)

From: Michael Edward Marotta <mercury@well.sf.ca.us>

>>>>>>  (This is for an article in the 1994 Loompanics catalog.)

That's great that Loompanics is covering encryption.
 
>>>>>>  I don't know about you guys, but I find PGP much easier to use.  
>>>>>>  RIPEM has all the hallmarks of unix wizardry.  It is poorly 
>>>>>>  documented.  The interface is difficult.  It grew in ways the 
>>>>>>  designer never contemplated.  And I haven't even RUN anything 
>>>>>>  yet...  Mark told me that it was primarily a MAILER.  OK, I can 
>>>>>>  accept that.  But I just don't see it catching on.  PGP, on the 
>>>>>>  other hand, shows all the evidences of shareware.  It's hard to 
>>>>>>  comment on the obvious.  

I think the existance of two programs is good, helping to promote some
rivalry and a certain amount of borrowing of good ideas from each other.
PGP now has a contrib directory with information and scripts to help
integrate it into mailers, an area which RIPEM has focussed on from the
beginning.

>>>>>>  So, I assume that I am in the normal range for a netrunner.  I 
>>>>>>  typically log in to fidonet bbses from home.  I have a PC clone.  
>>>>>>  I have had accounts on CompuServe, Prodigy and Delphi.  I have a 
>>>>>>  couple of email addresses.  I can't see myself using RIPEM.  I 
>>>>>>  can indeed see myself using PGP.

PGP was originally developed on a PC and then ported to Unix, while for
RIPEM it was the other way around, I believe.  The workings of RIPEM are
more Unix-ish while PGP is more DOS-ish.  Which program seems more natural
may depend on your background.

The user community is more diverse than most people realize.  You sound
like you have somewhat more of a PC orientation than many people on the
net.  Most of the people I run into have the opposite problem - they think
everything is Unix and that the PC is just some little corner of the world
which isn't really relevant.  They think that Usenet and Unix workstations
are the de facto target environment for any communications utility.

Actually, I think your experience is more relevant - PC's at home, hooking
up to BBS's, Fidonet, and the commercial services for communications;
also, people using PC's at home and dialing into Unix boxes at school or
work.  Another big area is people using networked PC's at work, although
since we are mostly talking about freeware packages here we haven't paid
much attention to that.

Especially with encryption, which generally can't run securely on multi-
user workstations, it makes more sense to think of PC's as the target platform.
Some people are starting to have single-user systems which can run Unix,
and this may increase with time, but for now DOS is where the emphasis
should be.  Many of the PC magazines predict that Unix is dead in that
market and that Windows is the platform of choice in the future, so that
is where we should be aiming, IMO.  As Phil Zimmermann says, "skate to
where the puck will be."

I didn't really mean to open up the standard OS wars here, but it's
important to realize that encryption has unique requirements for secrecy
and security which may affect the DOS vs Unix debate.  (And yes, I know
I'm leaving out Macs, Amigas, Ataris, and who knows what else.)

>>>>>>  Here are my questions:
>>>>>>  How do you relate to the above?  
>>>>>>  Do you see "everyone" on the Net happy as clams with privacy-
>>>>>>     enhanced mailers?  
>>>>>>  Do you expect more people to find out about and rely on PGP?  
>>>>>>  Do you see something else working here that I haven't perceived?

The big problem, as Eric Hughes has frequently mentioned here, is the need
to integrate encryption with mailing.  I think what is really needed is
some way of dealing with people who read mail on their PC while using
some kind of terminal program or similar package to connect to a BBS,
commercial service, or Unix box.  The problem is that there are so many
different programs in use and people probably won't be willing to switch
just to get encryption.  A lot of programs have fancy features including
scripting, macro keys, etc., and switching requires learning new ways of
doing all your old stuff.

Hal Finney
74076.1041@compuserve.com

-----BEGIN PGP SIGNATURE-----
Version: 2.2

iQCVAgUBLAi+1agTA69YIUw3AQGPLgQAlyIQOjmSo/Aq+aAUcTClfSVKXKMJiWk1
rYJ5qWiUYhkyyxRzTcLLUcGHg7kMlBwX1Xm8ptdq+/9FRUPXC8zGQjfD+Fn5AoHU
FjItmAk6t4JEDRiaYTQAhVlJZnt3LHmnvMADxwCm36He6svjQTWDDXyob0giWw9s
2bQbGLGZG9Y=
=yYIN
-----END PGP SIGNATURE-----