PGP and Compliance with SEC and Liability Rules

[mark at unicorn.com]

Tim May quoted from macweek:
>"The Gartner Group's Wheatman pointed out that PGP Policy Management Agent
>allows corporatins for the first time to centralize control over
>encryption: "For encryption to be accepted, IT had to gain control. This
>isn't Big Brother; this is necessary to comply with liability laws and SEC
>regulations.""

However, this doesn't seem to work, unless I'm mistaken about CMR
enforcement and the SEC regulations. CMR will only allow the snoops 
to read incoming email, not outgoing, and hence if Joe Blow at 
Foo-Bah.com wants to send me some handy insider trading tips CMR will 
not stop them. So this seems to be another justification for CMR 
which just doesn't make sense.

    Mark