Corporate use of gnupg

Nicholas Cole nicholas.cole at gmail.com
Tue Feb 19 13:28:17 CET 2008


On Sat, Feb 16, 2008 at 3:00 AM, Texaskilt <texaskilt at yahoo.com> wrote:
>
>  Looks like this is ADK.  Is there any way to do this on gpg?

GPG does not implement ADK.  I think that, historically, it seemed too
much like the kind of key escrow systems that governments have from
time to time talked about wanting, although clearly there is a
difference.

I know that ADK can be circumvented by a determined attacker, but it
strikes me as a useful feature, and I have never quite understood the
opposition to it.  It would have made encryption more palatable in
corporate settings, which surely would have been a good thing!

But I'm not an expert, and I'm probably missing a point somewhere...



More information about the Gnupg-users mailing list