NODE a8a05d93Re: Wide Spread use of PGP
mdbomber@w6yx.stanford.eduTue, 15 Feb 94 18:42:49 PST
>I find Bob Cain's comments that PGP should not be used on a netcom account
>disturbing. I think the priority that should be set is to get people using
>PGP, "in the habit" and then make sure they are using it on a local PC or
>Mac.
>
>Some people, believe it or not, might only have acess to a multi-user
>systems. These people should not be denied acess to PGP.
This is what I do. I connect to the net through SLIP and then use Eudora to
retrieve my mail from a DECstation. PGP is secure that way. However, the
password to attach to the POP server goes out in plaintext, and was undoubtedly
compromised in the packet-sniffing incident we heard so much about.
I have been trying to look into alternatives to plaintext passords flying
around, but have only confused myself. What is available?
Internet: mdbomber@w6yx.stanford.edu Matt Bartley
GPS: 33 49' xx''
117 48' xx'' (xx due to SA :-)
NODE 30e897f4Re: Wide Spread use of PGP
Derek Atkins <warlord@MIT.EDU>Tue, 15 Feb 94 19:19:47 PST
There is a Kerberized Popper available, which uses kerberos tickets
in lieu of passwords for POP3 mail retreival. This is used here at
MIT, and the code is available, although I do not know where to find
it offhand.
There are many KPOP clients available.
-derek
NODE 4e549ffbRe: Wide Spread use of PGP
"Mark W. Eichin" <eichin@paycheck.cygnus.com>Tue, 15 Feb 94 21:09:47 PST
>> There is a Kerberized Popper available, which uses kerberos tickets
net-dist.mit.edu:pub/pop/popper-1.7k.tar.Z -- as the README-FIRST
says, this is for convenience of people picking up Techmail or
Techmail-S (kerberized pop3 mailreaders, for the mac, the -S version
is for SLIP I'm pretty sure. PC version was just released, I think...)
I've heard rumour of a kerberized Eudora, that would interoperate with
this code, but haven't seen it.
mh-6.8 (and higher) will interoperate with this if you enable KPOP
(and probably ATHENA and one or two other things.) There's also an
emacs-movemail that has KERBEROS ifdef's.
_Mark_ <eichin@paycheck.cygnus.com>
... just me at home ...
ps. This is all Kerberos 4-based stuff. The popper, movemail, and
pop-from are included in the Cygnus Network Security package (along
with the rest of Kerberos 4 :-)