[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Having your own computer means never having....
I can't think of any real security risks introduced by allowing
employees the use of encryption, that weren't present already.
Certainly none mentioned thus far fit the bill.
Have a look at Matt Blaze's paper from Usenix last week. He describes
a smart-card based key escrow system for file encryption -- the risk
to the company is that an employee will quit, forget a password, walk in
front of a truck, etc. -- at which point they're unable to get at the
files that this person created -- files that the company owns in
accordance with the provision of the free-market contract willingly
agreed to by this employee.