Re: PGP 6.5.1 has been released

Steven M. Bellovin (smbRESEARCH.ATT.COM)
Wed, 7 Jul 1999 10:38:15 +0200

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Paul Leach: "MS Chap v2 analysis"
• Previous message: wazzaARO.EE.CIT.AC.NZ: "Re: NT Login Default Folder Vulnerability"
• In reply to: Ben Greenbaum: "NT Login Default Folder Vulnerability"
• Next in thread: Kenneth Albanowski: "Re: PGP 6.5.1 has been released"
• Next in thread: Nick_: "Re: PGP 6.5.1 has been released"
• Reply: Kenneth Albanowski: "Re: PGP 6.5.1 has been released"

>
>Self-Decrypting Archives. You may now encrypt files or folders into
>Self-Decrypting Archives (SDA) which can be used by users who do not even
>have PGP. The archives are completely independent of any application,
>compressed and protected by PGP's strong cryptography.

I'm glad this was on bugtraq -- any crypto product with "self-decrypting
archives" is a serious security threat, at least for the other versions I've
seen. They involve an executable that does *something* -- but what? The
world has recently learned what I hope the folks on this list have long
known -- that you can't trust email with executable content.

• Next message: Paul Leach: "MS Chap v2 analysis"
• Previous message: wazzaARO.EE.CIT.AC.NZ: "Re: NT Login Default Folder Vulnerability"
• In reply to: Ben Greenbaum: "NT Login Default Folder Vulnerability"
• Next in thread: Kenneth Albanowski: "Re: PGP 6.5.1 has been released"
• Next in thread: Nick_: "Re: PGP 6.5.1 has been released"
• Reply: Kenneth Albanowski: "Re: PGP 6.5.1 has been released"

This archive was generated by hypermail 2.0b3 on Tue Jul 06 1999 - 17:24:07 CDT