[svlug] Security & PGP: "Why Johnny Can't encrypt"

Mark Weisler mark at weisler-saratoga-ca.us
Sat Jan 31 14:36:55 PST 2015

On Jan 31, 2015, at 2:22 PM, Scott DuBois wrote:

> On Sat, Jan 31, 2015 at 12:38:33PM -0800, Michael Eager wrote:
>> The article may be interesting, but it was published in 1999, 15 years ago.  There may
>> have been significant changes during this time.  The article discusses PGP 5.0;
>> the current version is 8.0.
>> A much more recent critique of PGP can be found here:
>> http://blog.cryptographyengineering.com/2014/08/whats-matter-with-pgp.html
> Yeah, I read that one and it is disappointing to know that not a lot of effort
> has been put into the system for a long time. However, when we really consider
> the adoption rate, where is the motivation? The "Snowden effect" has created a
> level of awreness that was not as prominant as it once was sure, but how many
> people do we know can _actually_ set up encryption easily?
Very few and very few are at all interested in encrypting even when they have material they should keep private.
> We're not talking about tech circle people either, I'm talking the average
> office. If Sony had been using encryption, what stolen data would have been
> useful? What are the legalities _against_ encrypting the average office data
> even when people _know_ the benefits?
I don't believe there are any U.S. laws against genuine, strong encryption. 
On the contrary, when I left off working in the security industry two years ago, the use of encryption and supporting organizational policy stating that encryption should be used can be considered legal due diligence on the part of said organization to keep computing secure.

> -- 
> EFF ID: 1731778
> "The difference between stupidity and genius is that genius has limits."
> -- Einstein
> _______________________________________________
> svlug mailing list
> svlug at lists.svlug.org
> http://lists.svlug.org/lists/listinfo/svlug

Mark Weisler   
PGP Key ID 68E462B6
PGP Key fingerprint  87D5 A77B FC47 3CC3 DFF0  586D 23FF F8B4 68E4 62B6

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.svlug.org/archives/svlug/attachments/20150131/c8f865b7/attachment-0001.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 243 bytes
Desc: This is a digitally signed message part
Url : http://lists.svlug.org/archives/svlug/attachments/20150131/c8f865b7/PGP-0001.bin

More information about the svlug mailing list