Re: key escrow

mgraffam@mhv.net
Thu, 26 Mar 1998 21:23:23 -0500 (EST)

• Next message: Aaron D. Gifford: "another implementation of chaffing"
• Previous message: Anonymous: "Stego tools / parody code?"

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 26 Mar 1998 staym@accessdata.com wrote:

> What are your opinions on a program that would record all passwords used
> on a network, encrypt them w/ a public key, store the encrypted
> passwords, and give the private key to the system administrator? Does a
> sysadmin have the right to view any document created on a company's
> computer? Would you work on a computer that had such a program
> installed?

In my opinion this would depend on what sort of documents were being
encrypted. I do believe that a company has the right to escrow keys that
are used to encrypt company documents. If the user forgets the key,
the company needs a way to get those documents back.

On the other hand, if the system is a generic multiuser timesharing system
where files that are encrypted might include email or other private
files, then no I do not feel the administrators have the right to my
files. Does your landlord have the right to yours?

If a modified PGP or other program were installed to escrow my keys,
I would not use it. If possible, I would install my own program,
such as a trusted version of PGP. If I could not do this, I'd refuse
to use the system.

Michael J. Graffam (mgraffam@mhv.net)
http://www.mhv.net/~mgraffam -- Philosophy, Religion, Computers, Crypto, etc
"Act only according to that maxim by which you can at the same time will that
it should become a universal law.." - Immanuel Kant "Metaphysics of Morals"

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQCVAwUBNRsNoQKEiLNUxnAfAQHm2gP/ao8BO8fFhQVuYoQz0WU0Ed/WJr94Rifk
NCBywdr7tOaWa05rIuIVXPFPqHJZZq+e7BjbrZ95Ky7ql8O0ACtxd26B7ylBpDzp
3QBWOJLJYGgSyilEso7+U/TVgnb2MKvpqXZLW+nJ3ZD2dZOmrVpZqqJIIjhgAlRx
I+FGaL9xDUI=
=+vuq
-----END PGP SIGNATURE-----

• Next message: Aaron D. Gifford: "another implementation of chaffing"
• Previous message: Anonymous: "Stego tools / parody code?"