-- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBMTO: N48 04'14.8'' E11 36'41.2'' http://www.leitl.org 57F9CFD3: ED90 0433 EB74 E4A9 537F CFF5 86E7 629B 57F9 CFD3 ---------- Forwarded message ---------- Date: Sat, 08 Jun 2002 03:42:12 -0500 From: "Benjamin T. Moore, Jr." <btmoore@iname.com> To: ed@kapitein.net, speak-freely@fourmilab.ch Subject: RE: PGP and Speak Freely -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ok, let me see if I can maybe clarify what the issue is... Speak Freely offers the ability to encrypt your voice conversations in real time. If you have the "Crypto capable" version, when you've made a connection to someone, you both can enter an agreed upon key and your conversation will be secure from that point forward. This of course creates several problems. If someone is listening in, monitoring your conversation/traffic or packet sniffing, if for instance, you were to say in the conversation, lets use the word "monkey" for an IDEA key and you both typed in the word "monkey," your conversation would be encrypted using "monkey" as an IDEA key. The problem of course is, if someone is monitoring your conversation, they'd of heard you agree upon a key and they'd simply enter in the same key and continue to monitor. Thus, you need a method of securely exchanging either an agreed upon key or a generated key - Speak Freely will generate keys that you may copy and paste into any of the various windows for the various encryption algorithms. PGP, Pretty Good Privacy, is one damn good method of securely exchanging those keys. You may of course e-mail the key in an encrypted e-mail or file to the intended recipients or you could even send the encrypted file using several of the Instant Messaging Clients with a file transfer protocol. These methods will certainly work very well. However, take this example which happened to me just last evening. A friend and I were needing to set up a secure conversation. After we couldn't get Speak Freely to handle the key exchange, we decided to e-mail the key in a PGP encrypted e-mail. Trouble was, the mail server was down on his ISP. He could neither receive or send mail. If he hadn't had an auxiliary web-based e-mail account, things might have been more complex than they were. If Speak Freely were functioning correctly... let me amend that, IF we KNEW how to make Speak Freely handle the key exchange as described in the help file... It would have been a simple matter for us to allow Speak Freely to handle the key exchange. What is supposed to happen is... in the "connection" tab, you should be able to type the key identifier for the person(s), Speak Freely will then launch PGP - which it does - encrypt the generated key and transmit it to the intended recipients. This would automate secure communications. - -- Benjamin T. Moore, Jr. - <btmoore@iname.com> ICQ UIN - 8159114 *The Price of Freedom is Self-Reliance! The Cost is Education!* - -----Original Message----- From: owner-speak-freely@fourmilab.ch [mailto:owner-speak-freely@fourmilab.ch]On Behalf Of ed@kapitein.net Sent: Friday, June 07, 2002 6:14 AM To: btmoore@iname.com; speak-freely@fourmilab.ch Subject: Re: PGP and Speak Freely Hi, I have used PGP with speakfreely on unix. it worked just fine ( in command line mode, not with the GUI ). I did not used a key exhange option, you can just sent (by e-mail) your pgp public key to te recipient and ask him to email you his public key. I don't know of any need for keyexchange within SF itself. am I missing something ? please give some more detail on the needed key exchange option. Kind regards, @ On Fri, 07 Jun 2002 04:30:26 -0500 "Benjamin T. Moore, Jr." <btmoore@iname.com> wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Anyone gotten Speak Freely to do a PGP key exchange? Using Speak Freely version 7.2 and PGP 658...

- -- Benjamin T. Moore, Jr. - <btmoore@iname.com> ICQ UIN - 8159114 *The Price of Freedom is Self-Reliance! The Cost is Education!*

-----BEGIN PGP SIGNATURE----- Version: 6.5.8ckt http://www.ipgpp.com/

iQA/AwUBPQB9MnDnKKP6IdMiEQK8UwCfbzRmIrXrxTRgAkaW3JebiATGF7gAoLgv w7ferAcCgAcm42xY9Cg6fydm =GDim -----END PGP SIGNATURE-----

* * *

To unsubscribe from this mailing list, send E-mail containing the word "unsubscribe" in the message body (*not* as the Subject) to speak-freely-request@fourmilab.ch

* * * To unsubscribe from this mailing list, send E-mail containing the word "unsubscribe" in the message body (*not* as the Subject) to speak-freely-request@fourmilab.ch -----BEGIN PGP SIGNATURE----- Version: 6.5.8ckt http://www.ipgpp.com/ iQA/AwUBPQHDY3DnKKP6IdMiEQLTyACfSBRs+lR7R249Q+IWzE3nSjgIrDwAoPnX qOJLi95gXvufiwkq04ccm++5 =c9YJ -----END PGP SIGNATURE----- * * * To unsubscribe from this mailing list, send E-mail containing the word "unsubscribe" in the message body (*not* as the Subject) to speak-freely-request@fourmilab.ch