Re: encryption


Subject: Re: encryption
From: Aaron Lehmann (aaronl@vitelus.com)
Date: Mon Apr 23 2001 - 17:57:42 CDT


On Mon, Apr 23, 2001 at 01:00:28PM -0700, WJCarpenter wrote:
> 1. Parity-match with other WPs which have a built-in protection
> scheme.

That security is no security. Especially since we are open source. See
http://www.tuxedo.org/~esr/writings/cathedral-bazaar/cathedral-bazaar/x268.html,
near the bottom.

For real security, one should install and use an OpenPGP client. While
we may interface to GnuPG, we should NOT be doing any sort of
encryption ourselves. Crypto is best left up to cypherpunks. And using
GPG would make us compatable with OpenPGP keys.



This archive was generated by hypermail 2b25 : Mon Apr 23 2001 - 17:57:59 CDT