Crypto Quotes
"In future I think Phil will be seen as a pimple on crypto history (he invented and pioneered no algorithms), not the "hero of the first amendment" the poster would have us believe." Source: Message ID <34A574D1.568EA102@sternlight.com>
"As to "hero" of civil liberties disobedience, in my view Phil's behavior can fairly be said to be self-serving cowardice rather than heroic Ghandi-like self-immolation if public accounts can be credited." Source: Message ID <34A574D1.568EA102@sternlight.com>
"Make no mistake--if a few "civil liberties loudmouths" (Clipper _is_ voluntary) hadn't sabotaged its widespread acceptance we might have found it in every "serious" phone, for transparently optional use." Source: 4/9/96, <david-0904961630290001@nntp.netcom.com>
"You are flat wrong. TDES is FIPS-approved in the Netscape implementation." Source: <36896CBD.B954195F@sternlight.com>
"Since I've said before (as does your own reference) that TDES is FIPS approved in Netscape, I can only conclude you're deliberately lying that 56 bit DES is the only FIPS-approved encryption algorithm in 140-1." Source: <368975C4.7DACEC27@sternlight.com>
"You are getting pretty ridiculous by trying to ignore Netscape's TDES FIPS certification and focussing on 56 bit DES. And you were flat wrong when you said (in two messages now) that the only crypto algorithm that was FIPS certified in Netscape was 56 bit DES." Source: <36896CBD.B954195F@sternlight.com>
"When it comes to fully "unbreakable" crypto at the current classified state-of-the-art (whatever that is), I have some problems even with domestic use unescrowed." Source: <david-2308951320280001@192.0.2.1>
"There's no reason most people can't feel secure with a net that uses escrowed crypto that the NSA can read." Source: <david-1704961704190001@nntp.netcom.com>
"As far as I'm concerned, if a foreigner doesn't like key escrow, let him try to get an unescrowed system in his own country." Source: < david-0704962137540001@nntp.netcom.com >
"Most people have no fear of the NSA and believe that if one has nothing to hide from the government, there's no problem with key escrow under due process protections." Source: < 3653BCDE.F547E01A@sternlight.com >Nov. 19, 1998
"Your guess is irrational, since PGP itself uses S/MIME." Source: <338252B7.4946@sternlight.com>
"Both have been in development for several years, the subject of extensive standardization work, and even the PGP folks have been working on an S/MIME compatible standard for PGP." Source: Message ID <david-0907961800390001@192.100.81.148>
"It is perfectly correct that they can forge your signature if they can get your overall key (not your session key), but that is not a threat most people are concerned about since if it is known they can do this (as it would be under those circumstances) it will simply destroy trust in signatures rather than compromising them." Source < 365665F3.7D672FBB@sternlight.com >
"It can (and in the US automatically does) use stronger crypto than PGP." Source: <david-0611970814200001@lax-ca66-40.ix.netcom.com>
"Having longer keys is probably a good idea if it comes cheaply enough, but your chances of being hit by lightning are probably rather better than that of the NSA (or anyone else) committing the resources it takes to try to crack your 512 bit RSA key." Source: <357D8D18.711F9660@sternlight.com>, 6/9/98
"I support escrow of exported cryptosystem strong keys, also on economic grounds (and I see no conflict there with the Constitution, despite attempts by others to make such a case through rhetoric)." Source: <david-1404960818380001@nntp.netcom.com>
"Actually I'm a very sophisticated PGP plant. By calling attention to all of PGP Inc's serious flaws, but associating them with an anti-anarchist position, I cause those flaws to be ignored or rationalized by the "faithful" so that PGP can continue in business instead of getting the horse-laugh and rejection it would otherwise receive. We thank you for your continued patronage even as we regularly and consistently give you the finger. Thanks for rationalizing away our disclaimers of responsibility if we cause you to become an infringer. Thanks for rationalizing our depriving you of RSA and making all your old keys obsolete." Source: Message ID <david-2111971006040001@lax-ca66-19.ix.netcom.com>
|