From: "Ama-gi ISPI"
Subject: IP: ISPI Clips 6.38: NAI [PGP] FlipFlop Back to Pro Key Recovery Group
Date: Fri, 13 Nov 1998 00:50:46 -0800
To:
ISPI Clips 6.38: NAI [PGP] FlipFlop Back to Pro Key Recovery Group
News & Info from the Institute for the Study of Privacy Issues (ISPI)
Friday November 13, 1998
ISPI4Privacy@ama-gi.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This From: WIRED News, November 12, 1998
http://www.wired.com
NAI Back in Key Recovery Group
http://www.wired.com/news/print_version/technology/story/16219.html?wnpg=al
l
Wired News Report
Computer-security giant Network Associates Inc. has quietly rejoined a
global coalition promoting a controversial technology that could give the
US government access to encrypted data.
Network Associates [ http://www.nai.com/ ], which owns cryptography
software firm PGP and firewall vendor Trusted Information Systems, dropped
out of the Key Recovery Alliance [ http://www.kra.org/ ] last December to
protect the PGP brand, which some civil-liberties advocates say was tainted
by its association with the alliance.
Activists charge that the alliance promotes technology that poses a threat
to civil liberties. The alliance says it is not a lobbying group but does
support the concept of key recovery, a system in which a copy of the secret
key that unlocks scrambled data is placed in escrow.
"We would assume that the acquisition of Trusted Information Systems would
be a contributing factor with the change of that policy," said David Sobel
of the Electronic Privacy Information Center.
"TIS is widely regarded as the originator of the whole concept of key
escrow," Sobel said. Several executives are former employees of the
National Security Agency, which is believed to be a prime advocate of key
recovery in Washington.
Currently, the Clinton administration bars the export of strong encryption
products that do not include a key-recovery component. The policy has long
irked security software companies who see the policy as giving foreign
competition an unfair advantage.
Civil liberties advocates dislike key recovery because they feel it is the
start of a slippery slope toward so-called mandatory key recovery, which
would give the government access to private data.
While the Key Recovery Alliance says it is not a political action committee
or lobbying group, the group is often held up by politicians as an example
of industry support for the administration's policy.
Last December, a Network Associates executive said the Key Recovery
Alliance created a misunderstanding about the company's position on the
issue.
"We want people to understand that Network Associates' position and PGP's
position is to encourage the government and industry to move towards a
policy that allows export of strong cryptography without mandatory key
recovery," Gene Hodges, director of product management at Network
Associates, told Wired News last December.
An attorney with the Center for Democracy and Technology said that Network
Associates opposes mandatory key recovery, but that the company may be
hedging its bets against future shifts in Administration policy.
"There are other companies in the Key Recovery Alliance who are steadfastly
opposed to the administration's policy and mandatory key recovery, yet I
think they are part of the alliance because they feel they need to be,"
said Alan Davidson
Lynn McNulty, director of government affairs for RSA
[ http://www.rsa.com/ ] Data Security, said the company is likely not
expecting negative political fallout, one year after the PGP acquisition.
"The commercial [version of] PGP has kind of been absorbed [into Network
Associate's product line]," McNulty said. "The personal verison kind of
enjoys folklore status among the civil libertarians."
No representative from either Network Associates or the Key Recovery
Alliance was available for comment Thursday.
Related Wired Links:
Another Network Associates U-Turn on Key Recovery? 25.Feb.98
http://www.wired.com/news/news/technology/story/10530.html
Network Associates Disavows Key Recovery Tie: 8.Dec.97
http://www.wired.com/news/news/technology/story/9010.html
Pretty Good Privacy Not Looking So Great: 3.Dec.97
http://www.wired.com/news/news/politics/story/8906.html
Copyright © 1994-98 Wired Digital Inc.
--------------------------------NOTICE:------------------------------
ISPI Clips are news & opinion articles on privacy issues from
all points of view; they are clipped from local, national and international
newspapers, journals and magazines, etc. Inclusion as an ISPI Clip
does not necessarily reflect an endorsement of the content or opinion
by ISPI. In compliance with Title 17 U.S.C. section 107, this material is
distributed free without profit or payment for non-profit research
and educational purposes only.
---------------------------------------------------------------------------
ISPI Clips is a FREE e-mail service from the "Institute for the Study
of Privacy Issues" (ISPI). To receive "ISPI Clips" on a regular bases
(up to 3 - 8 clips per day) send the following message "Please
enter [Your Name] into the ISPI Clips list: [Your e-mail address]" to:
ISPIClips@ama-gi.com .
The Institute for the Study of Privacy Issues (ISPI) is a small
contributor-funded organization based in Victoria, British Columbia
(Canada). ISPI operates on a not-for-profit basis, accepts no
government funding and takes a global perspective.
ISPI's mandate is to conduct & promote interdisciplinary research
into electronic, personal and financial privacy with a view toward
helping ordinary people understand the degree of privacy they have
with respect to government, industry and each other and to likewise
inform them about techniques to enhance their privacy.
But, none of this can be accomplished without your kind and
generous financial support. If you are concerned about the erosion
of your privacy in general, won't you please help us continue this
important work by becoming an "ISPI Supporter" or by taking out
an institute Membership?
We gratefully accept all contributions:
Less than $60 ISPI Supporter
$60 - $99 Primary ISPI Membership (1 year)
$100 - $300 Senior ISPI Membership (2 years)
More than $300 Executive Council Membership (life)
Your ISPI "membership" contribution entitles you to receive "The ISPI
Privacy Reporter" (our bi-monthly 12 page hard-copy newsletter in
multi-contributor format) for the duration of your membership.
For a contribution form with postal instructions please send the following
message "ISPI Contribution Form" to ISPI4Privacy@ama-gi.com .
We maintain a strict privacy policy. Any information you divulge to ISPI
is kept in strict confidence. It will not be sold, lent or given away to
any third party.
****************************************************
To subscribe or unsubscribe, email:
majordomo@majordomo.pobox.com
with the message:
(un)subscribe ignition-point email@address
or (un)subscribe ignition-point-digest email@address
****************************************************
www.telepath.com/believer
****************************************************
