RE: [BOARD] PGP Preferences

["Balenson, David" <David_Balenson@nai.com>]

Steve-

I'd encourage you to use PGP 6.5.2 and have old 2.6.2 users upgrade to
6.5.2.  PGP 6.5.2 supports both RSA and Diffie Hellman keys and as you said
is backward compatible with all PGP versions including 2.6.2.  It integrates
seamlessly into all the popular Windows and Macintosh mail packages
(Outlook, Lotus Notes, Novell GroupWise, etc.).  There are also command line
versions available for Unix.  It's much easier to use than the older
versions.  PGP 2.6.2 is antique in Internet terms.  It is not even an NAI
product.  It was developed by Phil Zimmermann, etc. before PGP Inc. or
Viacrypt existed.  It is licensed only for free, non-commercial use.  It
also contains RSAREF, a MIT-developed freeware implemention of RSA that is
also specifically licensed only for non-commercial use.  

-DB

------------------------------------------------------------------------
David M. Balenson, Manager, Technical Outreach and Special Projects
NAI Labs, The Security Research Division of Network Associates, Inc.
3060 Washington Road, Glenwood, MD 21738  USA
david_balenson@nai.com; 443_259.2358; fax 301_854.4731



> -----Original Message-----
> From: Steven M. Christey [mailto:coley@linus.mitre.org]
> Sent: Tuesday, November 02, 1999 5:06 PM
> To: cve-editorial-board-list@lists.mitre.org
> Subject: [BOARD] PGP Preferences
> 
> 
> All:
> 
> We are planning on using PGP to allow activities like signing CVE
> content, encrypted communications between MITRE and individual Board
> members, etc.
> 
> A question has arisen as to which version of PGP is preferable, namely
> 2.6.2 or some 6.x version.  As I understand it, 6.x is backward
> compatible with 2.6.2, so it seems to make sense to adopt 2.6.2.  Any
> opinions one way or another?
> 
> - Steve
>