[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: German Key Usage
It has become
a habit,
or "mantra"
or "Security 101"
or ...... a religion?
that the only justification for key-escrow applies to
data-encryption usage, and never to dig-sig.
I fear we will now be assaulted with "its ok to have DS-keys
escrowed, as long as the NR-bit is not set."
This would be stepping on a very slippery slope.
The DS/NR separation tends to weaken key-escrow's cage.
Not if we don't let it. Germany has very strict laws protecting
individuals' privacy. I don't think they'll slide.
I'm not an advocate of key escrow. I don't even disagree with
the above assertion. But we should strive to drive technology
with more than habits and mantras.
Paul