[2092] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: statement of intent, security of CMR (Re: GAK and S/MIME)

daemon@ATHENA.MIT.EDU (Andreas Bogk)
Wed Jan 28 16:26:33 1998

To: Adam Back <aba@dcs.ex.ac.uk>
Cc: colin@nyx.net, cryptography@c2.net
From: Andreas Bogk <andreas@artcom.de>
Date: 28 Jan 1998 15:31:54 +0100
In-Reply-To: Adam Back's message of Tue, 27 Jan 1998 22:13:01 GMT

>>>>> "Adam" == Adam Back <aba@dcs.ex.ac.uk> writes:

    Adam> Situations where a group of people need to be able to read
    Adam> email to an address (such as a sales team when one team
    Adam> member is away) can be addressed with shared keys, or with
    Adam> Matt Blaze's proxy cryptography techniques to translate
    Adam> messages from one recipient to another.

I'd like to see these techniques widely available. Corporate key
escrow is evil.

    Adam> Ah, yes, but it doesn't stop there -- if the user "chooses"
    Adam> not to include the additional recipient the mail is bounced
    Adam> (if PGP's SMTP policy enforcer is so configured).  If the

IIRC, this is checked by trial-decrypting a 16-bit field. Somehow this
reminds me of Clipper.

Andreas

-- 
Top ten reasons why SGI sucks, No 5:
"dbx Internal Error: Got a FatalError event in executeRPC. Giving up
 FatalError event Error code 77 serial# 5." dbx 7.1 on IRIX 6.x

home help back first fref pref prev next nref lref last post