[2081] in cryptography@c2.net mail archive
Re: GAK and S/MIME
daemon@ATHENA.MIT.EDU (Lutz Donnerhacke)
Mon Jan 26 09:39:44 1998
To: cryptography@c2.net
From: lutz@taranis.iks-jena.de (Lutz Donnerhacke)
Date: 26 Jan 1998 12:23:05 GMT
* Colin Plumb wrote:
>Can someone think of a better scheme? I really am interested.
Yep. Companies only need access to stored data. So encrypt decrypted email
with a company revocery key only when storing into a local folder. Prevent
company recoverable email from leaving the company. Mailers can simply
remove this special packet before mailing.
This guarantees recovery on storage and prevents security flaws in
communciation.