Forum Home
Press F1
 
Thread ID: 46183 2004-06-16 01:07:00 OT - Submision on antispam legislation - comments please aronking (2294) Press F1
Post ID Timestamp Content User
245018 2004-07-14 06:00:00 You're quite right, there is PGP (web.mit.edu), but there is also GPG (http://www.gnupg.org/).

GPG works in much the same way as PGP, and is compliant with OpenPGP. As stated on the GnuPG website, "GnuPG is a complete and free replacement for PGP", and as such, "it can be used without any restrictions".

I do believe there is an international version of PGP available (PGP cannot be exported from North America), but it is significantly easier to just get GPG.

And like I said, there are vulnerabilities any a lot of the ideas to stop spam that you could link with using GPG/PGP (or similar - technically the encryption of an email via GPG or PGP is a mathematical process, although it certainly wouldn't be a small one if you wrote long emails with massive attachments), such as the compromise of a database that contained every public key.

The thing is, if even only people in a small group of friends all got a GPG key, they could be free of spam simply by automatically deleting emails that cannot be decrypted or do not have a valid GPG signature. I'm struggling a bit to understand how GPG works (www.gnupg.org/(en)), but I did understand it all last year, and I'm quite sure that it would be a viable method of giving spam one final kick in the rear end.

I bloody well hope no one comes along and spoils this all by telling of a major flaw in the base idealogy (that every email address requires a GPG key). However, if people could help to build up a variety of methods based on requiring a GPG/PGP key, that would be fantastic!

:D
agent (30)
245019 2004-07-14 08:35:00 Argus. Is this true? >Closing date for responses to the spam paper is June 30. Scouse (83)
245020 2004-07-14 09:15:00 > I do believe there is an international version of PGP available (PGP cannot be exported from North America), but it is significantly easier to just get GPG.

What do you mean "can't be exported"?

Anyone with a credit card can buy it online. I've done it myself.
kiki (762)
245021 2004-07-14 09:17:00 Also it looks like GPG is useless at the moment for Windows users, its in command line interface. No thanks. kiki (762)
245022 2004-07-14 09:57:00 Actually, there are a wide range of frontends (www.gnupg.org/(en)) for GPG.

And in the case of not being able to export PGP outside North American, I was referring to the PGP that is distributed by MIT, not PGP such as can be bought at www.pgpstore.com.
agent (30)
245023 2004-07-14 10:03:00 > > I do believe there is an international version of
> PGP available (PGP cannot be exported from North
> America), but it is significantly easier to just get
> GPG.
>
> What do you mean "can't be exported"?
>
> Anyone with a credit card can buy it online. I've
> done it myself.


There are 2 versions available - 128bit (I think) for the rest of the world and 256bit (double the other one anyway) for the U.S. - illegal to export the high end encryption outside of the US.
andrew93 (249)
1 2 3 4