[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: fwd: The Swedes discover Lotus Notes has key escrow! (Win Treese)
-----BEGIN PGP SIGNED MESSAGE-----
In <[email protected]>, on
01/06/98
at 12:11 PM, Ray Arachelian <[email protected]> said:
>Lotus, a subsidiary of the American computer giant IBM, has negotiated a
>special solution to the problem. Lotus gets to export strong
>cryptography with the requirement that vital parts of the secret keys are
>deposited with the U.S. government. ``The difference between the
>American Notes version and the export version lies in degrees of
>encryption. We deliver 64 bit keys to all customers, but 24 bits of
>those in the version that we deliver outside of the United States are
>deposited with the American government. That's how it works today,''
>says Eileen Rudden, vice president at Lotus.
I have 2 problems with this outside of the fact they are doing it:
1) 64 bits is too weak.
2) why should we trust them that it is only the export versions they are
giving the 24bit to the government on??
Yet *another* reason not to use Lotus Bloats.
- --
- ---------------------------------------------------------------
William H. Geiger III http://users.invweb.net/~whgiii
Geiger Consulting Cooking With Warp 4.0
Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html
- ---------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000
iQCVAwUBNLJ0AY9Co1n+aLhhAQH/ugP/c98Sq7gCiXV8P045MyJZbcGmJGmD1IeX
SgQAhCrThv8bmou+stgJfoYClaDQ1ozbyGyCuJXgCgp/AHhUjEuDLGxIgAzRTuHX
V3vNSvNhW3FHMVSG1+UGylchaZzwhyo036frJrc3zxGXPGY142Y1BEW+4Zeoa1NN
YPw0QYYnxnY=
=k6PK
-----END PGP SIGNATURE-----