[13733] in Cypherpunks
Re: macPGP
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Mon May 16 11:48:34 1994
To: Christoph_Pagalies@hh2.maus.de, cypherpunks@toad.com
In-Reply-To: Your message of "Mon, 16 May 1994 09:45:38 EDT."
<9405161641.AA07176@cmyk.warwick.com>
Reply-To: perry@imsi.com
Date: Mon, 16 May 1994 11:43:19 -0400
From: "Perry E. Metzger" <perry@imsi.com>
Christoph Pagalies) (by way of habs@cmyk.warwick.com (Harry Shapiro) says:
> HH> Since that doesn't allow us to verify the code
>
> If heard that argument quite often, but do you really intend to examine
> all of the sources?
I tend to. I usually only look at diffs between successive versions.
In any case, the point is more about the capacity to examine the
sources more than anything. Even if one has not personally examined
them, the fact that others may examine them is a deterrent to
tampering at the release level. I don't believe in releasing
cryptography or other security software without sources.
Perry
