CMR versus GAK?

[William H. Geiger III]

-----BEGIN PGP SIGNED MESSAGE-----

In <199710240110.UAA09551 at dfw-ix3.ix.netcom.com>, on 10/23/97 
   at 06:05 AM, nobody at neva.org (Neva Remailer) said:


>"Big Brother or the Boss?"


>Are you SURE that's a dichotomy?

>Big Biz and Big Gov are almost inextricably intertwined these days.  If
>dot-com pushes for snoopware, it is called CMR.  If dot-gov pushes for
>it, it is called GAK.  The real question is, if the interests of Biz and
>Gov coincide, and "real cooperation" is achieved, does it really matter
>where the idea originated?  Either way you still have snoopware.

Well their are some basics that seem to get overlooked:

Corporate Access to Plain Text (CAPT)
- ------------------------------

- -- You work for the company
- -- Any documents you create on company time are owned by the company --
The company uses PGP 5.5 to ensure they can decrypt *their* documents --
You know which documents they have access to
- -- CAPT is flexable and can be adjusted to fit the security needs
   of the company.


Government Access to Keys (GAK)
- -------------------------------

- -- The governemnt works for you (at least in theory)
- -- Any document you create are your own.
- -- The govenrment want your keys so they can read *your* documents -- The
government wants access to ALL your documents
- -- There is no fleaxbility in GAK they want it all


There is a clear distinction here between one haveing the ability to
decrypt their own documents and a non-owner decrypting someone elses
documents. This is the distinction between corporate access to plain text
and GAK. The company *owns* the documents. They have a right to read them
any time they want. If you don't want your *private* corrospondance to be
read by others in the company then don't write them and transmit them at
work. 

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://www.amaranth.com/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html                        
- ---------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNFCTn49Co1n+aLhhAQFcBAP9EY+myW2V+/OtXvr8mxbFuoQtIY2LIBbV
gaSSUzkKdSX79t+kcXnyyyADqoHwA1FPrcfA+92l+1IgXq243tT+lwDY3G3cCU/S
X6RBU0UbO9MUvc29LYcncr/nD30AoeN34qWMd3Pu6cwtgd3s7xZu0rdEQSww8nll
SNAKogoJS9c=
=e42J
-----END PGP SIGNATURE-----