[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Key Escrow Good, GAK Bad
Ken Kirksey sez:
>
> I'll give an example. About a year ago, my boss wanted to protect his
> file of annual financial projections for the company from prying eyes on
> our Macintosh network. I installed CurveEncrypt on his machine, showed
> him how to use it, and gave him the standard lecture on choosing a good
> passphrase. I stressed that he needed to chose a passphrase easy to
> remember, because if he forgot it, there was no way to get his file back.
>
> Well, he forgot his passphrase.
There's a low-tech solution. There's a stock GSA form for recording
a container [safe] combo. You seal it up, put it in an envelope, you
& witness sign across the flap. You store same in another container,
such as in the security office. [THAT safe combo is usually kept
in a 24-hour manned location such as the ECC or such.]
Think along those lines, perhaps.
--
A host is a host from coast to [email protected]
& no one will talk to a host that's close........[v].(301) 56-LINUX
Unless the host (that isn't close).........................pob 1433
is busy, hung or dead....................................20915-1433