sameer says:

I managed to get swipe into the kernel here at infinity.c2.org-- If any sites would like to install swipe on their systems and setup encrypted channels between our sites, and then do some experimentation with it, maybe some development (I don't really have time to develop stuff.. but..), please mail me.

I'll point out for IETFers that a heated swIPe discussion is now occuring on the previously morribund IP security mailing list. Looks like we will be able to manage to get crypto into the lowest levels of the IP stack and completely embedded within the IP security framework. Perry

Oh, I'll also point out that yours truly distributed 150 disks with the swIPe code on it at Usenix. Right now, I'm concentrating on the IP stack as the most productive place to seal crypto in. Also by the way, I've come to the conclusion that there are several major flaws in the design of PGP that will make it impossible to scale network wide. It is, for instance, impossible to design a reasonable distributed key management architecture because the key IDs are essentially random 64 bit numbers without any structure. I'm saddened by this, but not truly horrified. PGP is a cool start to the "encryption everywhere everyday" movement, but it is only a start, and one can't be overly attached to any one design. Perry