🚀 go-pugleaf

In article <1992Dec17.235959.1@nowhere.mil>, nobody@nowhere.mil writes:
> David Sternlight (strnlght@netcom.com> says:
> >Read my lips. PGP1.0 was contraband in the U.S., so much so that the
> >author pulled out. It was illegally exported.  PGP2.0 was based on it.
> >Thus the Europeans who use it don't have clean hands, regardless of
> >the state of the law there.
> 
> Which is interesting, considering an entry on a PGP public key ring I
> received recently:
> 
> Type bits/keyID   Date       User ID
> pub  1024/B33E65 1992/09/24  David Sternlight <strnlght@netcom.com>
> 
> 
> I guess it's "do as I say, not as I do", eh, Dave?

Ah, I love anonymous postings.  Umm -- who signed that key?  There's
this about certificates (i.e., about the much-maligned PEM) -- there's
a trail of evidence and authentication.

Quick -- how many people know how to generate a key with an arbitrary
name?  I thought so...

Btw -- the key might be genuine.  But an anonymous posting sure doesn't
give me any reason to think so.

nobody@nowhere.mil (in other words somebody who's hiding--perhaps
because he has something to hide) calls attention to my PGP
signature floating around.

This signature was created when I first saw PGP, and before I
had a conversation with Jim Bidzos, who convinced me of the
illegality of PGP in the U.S.

I no longer use PGP and the signature is no longer valid. When
PGP becomes permissible in the U.S., perhaps through one of the
mechanisms I suggested in a recent post, I will have a PGP signature
again.

David

Steven Bellovin calls attention to the anonymous sleaze who posted
an old key I used for PGP before I found it was illegal in the U.S.
I don't use it, and haven't except for generating the key. Note
that the date of the key is September 24, 1992, well before I discovered
that PGP is illegal here.

In article <1992Dec18.094613.18728@netcom.com>, strnlght@netcom.com (David Sternlight) writes:
> Steven Bellovin calls attention to the anonymous sleaze who posted
> an old key I used for PGP before I found it was illegal in the U.S.
> I don't use it, and haven't except for generating the key. Note
> that the date of the key is September 24, 1992, well before I discovered
> that PGP is illegal here.

Doesn't matter. You committed a crime and you should be prosecuted to
the fullest extent of the law.

-Garrett

In article <1992Dec18.021308.10817@ulysses.att.com>, smb@research.att.com (Steven Bellovin) writes:
> In article <1992Dec17.235959.1@nowhere.mil>, nobody@nowhere.mil writes:

         [Text deleted where David Sternlight expounds his belief that PGP
    is "tainted" and that to use it is unethical, regardless of local
    laws.]

>> Which is interesting, considering an entry on a PGP public key ring I
>> received recently:
>> 
>> Type bits/keyID   Date       User ID
>> pub  1024/B33E65 1992/09/24  David Sternlight <strnlght@netcom.com>
>> 
>> 
>> I guess it's "do as I say, not as I do", eh, Dave?
> 
> Ah, I love anonymous postings.  Umm -- who signed that key?  There's
> this about certificates (i.e., about the much-maligned PEM) -- there's
> a trail of evidence and authentication.
> 
> Quick -- how many people know how to generate a key with an arbitrary
> name?  I thought so...

         For that matter, look:

         Type bits/keyID   Date       User ID
         pub  1024/B33E65 1992/11/24  Jim Bidzos <jim@rsa.com>               

         So far as I know, no such public key exists. I just copied the
    sentences from Nobody's post, and twiddled them. 

         [DISCLAIMER: Again, I am not trying to make it look like Jim
    Bidzos uses PGP, or has a keypair in some PGP keyring. I am trying to
    point out that I can provide "proof" of somebody having a keypair even
    without generating such a keypair.]

> Btw -- the key might be genuine.  But an anonymous posting sure doesn't
> give me any reason to think so.

         Besides, the point is irrelevant. The key was supposedly generated
    nearly three months ago; plenty of time for a change of heart about the
    ethics of using this program. (Not that I agree with Mr. Sternlight's
    points, but I felt the original post was a low blow.)


-- 
 Phillip J. Birmingham   birmingh@fnal.fnal.gov  
 I don't speak for Fermilab, although my mouth is probably big enough...

strnlght@netcom.com (David Sternlight) writes:

> Steven Bellovin calls attention to the anonymous sleaze who posted
> an old key I used for PGP before I found it was illegal in the U.S.
> I don't use it, and haven't except for generating the key. Note
> that the date of the key is September 24, 1992, well before I discovered
> that PGP is illegal here.

Then, maybe you should use PGP 2.x once more - to revoke your key...
Because, I have it in my collection of public keys too, and it has
certainly being distributed to several people who asked me for it...

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.1 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany