🚀 go-pugleaf

In article <19960306.79FA308.148EB@ElOrbe.ibm.net>, Raul Miro
<cotin@ElOrbe.ibm.net> wrote:
 
> I think in this times is a little ridiculous to send this
> things via Snail Mail...

There is nothing ridiculous about security. I happily send PPP
key files by PGP-encrypted e-mail IF I get the PGP fingerprint
by some secure method such as snail mail. Otherwise I ship the
key file on floppy disk - by air mail, at my own cost.

I don't quite understand the surprise of some users about this.
This topic is explained in great detail in the PGP docs, and
I have also explained the shipping options for PPP keys in
PPP.guide.

> I have other keys and they sent
> them to me via E-Mail... without troubles...

How do you know that there has been no trouble ? Some greedy
sysop who has root privileges at your Internet provider's mail
server (or at the sender) might have installed a script to
automatically copy all uuencoded mail, and you would never
know about it.

Your key file might already be going around in the "scene",
and the software author might get back to you and threaten
you with a lawsuit in a few months.

If other software authors handle things differently: fine.
Personally I don't want to take unnecessary risks, and airmail
is not that slow really...

Besides look at the upside: Sending key files by snail mail
is for your own protection, and you even get a free floppy
disk with your own personalized label on it :-)

--
Holger Kruse   kruse@cs.ucf.edu   kruse@america.com
               http://www.america.com/~kruse/home.html