Re: Wide Spread use of PGP
I find Bob Cain's comments that PGP should not be used on a netcom account disturbing. I think the priority that should be set is to get people using PGP, "in the habit" and then make sure they are using it on a local PC or Mac.
Some people, believe it or not, might only have acess to a multi-user systems. These people should not be denied acess to PGP.
This is what I do. I connect to the net through SLIP and then use Eudora to retrieve my mail from a DECstation. PGP is secure that way. However, the password to attach to the POP server goes out in plaintext, and was undoubtedly compromised in the packet-sniffing incident we heard so much about. I have been trying to look into alternatives to plaintext passords flying around, but have only confused myself. What is available? Internet: mdbomber@w6yx.stanford.edu Matt Bartley GPS: 33 49' xx'' 117 48' xx'' (xx due to SA :-)
There is a Kerberized Popper available, which uses kerberos tickets in lieu of passwords for POP3 mail retreival. This is used here at MIT, and the code is available, although I do not know where to find it offhand. There are many KPOP clients available. -derek
There is a Kerberized Popper available, which uses kerberos tickets
net-dist.mit.edu:pub/pop/popper-1.7k.tar.Z -- as the README-FIRST says, this is for convenience of people picking up Techmail or Techmail-S (kerberized pop3 mailreaders, for the mac, the -S version is for SLIP I'm pretty sure. PC version was just released, I think...) I've heard rumour of a kerberized Eudora, that would interoperate with this code, but haven't seen it. mh-6.8 (and higher) will interoperate with this if you enable KPOP (and probably ATHENA and one or two other things.) There's also an emacs-movemail that has KERBEROS ifdef's. _Mark_ <eichin@paycheck.cygnus.com> ... just me at home ... ps. This is all Kerberos 4-based stuff. The popper, movemail, and pop-from are included in the Cygnus Network Security package (along with the rest of Kerberos 4 :-)
participants (3)
-
Derek Atkins -
Mark W. Eichin -
mdbomber@w6yx.stanford.edu