[8150] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Is PGP broken?

daemon@ATHENA.MIT.EDU (Ben Laurie)
Sat Dec 2 12:34:15 2000

Message-ID: <3A24FC1F.6116E864@algroup.co.uk>
Date: Wed, 29 Nov 2000 12:52:47 +0000
From: Ben Laurie <ben@algroup.co.uk>
MIME-Version: 1.0
To: Russell Nelson <nelson@crynwr.com>
Cc: cryptography@c2.net
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Russell Nelson wrote:
> 
> Is it just me, or is PGP broken?  I don't mean any particular version
> of PGP -- I mean the fact that there are multiple versions of PGP
> which generate incompatible cryptography.  Half the time when someone
> sends me a PGP-encrypted message, I can't decrypt it.  Presuming that
> I'm right, is anyone attempting to fix PGP?
> 
> Not to mention anything about PGP keyservers, or the utter and
> complete absence of anybody doing point-source PGP signing.

Although it is broken the strategy I use is to use a 2.x generated key
with 5/6.x PGP versions. This seems to work pretty smoothly.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff


home help back first fref pref prev next nref lref last post