No Subject

Is anyone aware of any critical evaluations 
performed on the security of the Network Associates 
(a.k.a. McAfee) PGP for Personal Privacy?  Traditionally, 
PGP source code has always been available for 
evaluation by the Net community, but this isn't the 
case with the newer commercial versions.

Additionally, and this is a bit paranoid, but PGP in 
the past has come with digitally signed files to 
authenticate the integrity of the files.  Once again, 
commercial versions offer no such guarantee that the 
software hasn't been tampered with between the factory 
and the store shelves.

Comments?

On Thu, Dec 03, 1998 at 03:21:32PM +0100, Anonymous wrote:
> Is anyone aware of any critical evaluations 
> performed on the security of the Network Associates 
> (a.k.a. McAfee) PGP for Personal Privacy?  Traditionally, 
> PGP source code has always been available for 
> evaluation by the Net community, but this isn't the 
> case with the newer commercial versions.

are you sure?

according to

http://www.pgpi.com/ 

PGP 6.0.2i available soon

The PGP 6.0.2 source code books have arrived in Europe, and work is
going on to scan them in and create an international version: 6.0.2i.
However, there are 25 volumes and over 12,000 pages, so it will
probably take a while to finish.

-- 
1024/D9C69DF9 steve mynott steve@tightrope.demon.co.uk http://www.pineal.com/

in the top 40, half the songs are secret messages to the teen world to
drop out, turn on, and groove with the chemicals and light shows at
discotheques. -- art linkletter