[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Key Escrow Good, GAK Bad



Ken Kirksey sez:
> 
> I'll give an example.  About a year ago, my boss wanted to protect his 
> file of annual financial projections for the company from prying eyes on 
> our Macintosh network.  I installed CurveEncrypt on his machine, showed 
> him how to use it, and gave him the standard lecture on choosing a good 
> passphrase.  I stressed that he needed to chose a passphrase easy to 
> remember, because if he forgot it, there was no way to get his file back.
> 
> Well, he forgot his passphrase.  

There's a low-tech solution. There's a stock GSA form for recording
a container [safe] combo. You seal it up, put it in an envelope, you
& witness sign across the flap. You store same in another container,
such as in the security office. [THAT safe combo is usually kept
in a 24-hour manned location such as the ECC or such.]

Think along those lines, perhaps.

-- 
A host is a host from coast to [email protected]
& no one will talk to a host that's close........[v].(301) 56-LINUX
Unless the host (that isn't close).........................pob 1433
is busy, hung or dead....................................20915-1433