Adam Shostack <adam@bwh.harvard.edu>:
As I said in my first message, I've heard 2.5 has already found its way out of the US. If that is the case, then the non-US users have access to 2.5. If they do have access to 2.5, then could we discuss the technical merits of patching 2.5 v. patching 2.3?
Lets do a quick check and see where that might be...
dirs /alex/edu/cmu/cs/sp/alex/links/security
gunzip -c < Index.gz | grep -i pgp | grep -v pgpkey | grep 5
/alex/edu/berkeley/csua/ftp/pub/cypherpunks/pgp/pgp25 [...] /alex/org/eff/ftp/pub/Net_info/Tools/Crypto/PGP/README.PGP2.5 [...] /alex/edu/umich/eecs/ftp/software/crypt/pgp25src.tar [...] /alex/it/unimi/dsi/ftp/pub/security/crypt/PGP/p25.tar Yup. Not only is it out, it is FTPable from outside.
alex2url /alex/it/unimi/dsi/ftp/pub/security/crypt/PGP/p25.tar
ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/p25.tar -- Vince (For info on Alex see ftp://alex.sp.cs.cmu.edu/www/alex.html)