Banks and 128 bit DES

[David Hansen]

On 18 Mar 00, at 16:32, Ben Laurie wrote:

> I'm not sure what it tells us, since the obvious conclusion is that
> those who did the implementation are not those who answer stupid
> questions from clients. :-)

Yes. This is the "response" to my message querying 128 bit DES. 
One would have thought that if a mere customer asked them about a 
specific technical issue they would at least have the intelligence to 
get an answer from the "security area".

And these are the sort of people government wanted (and may still 
want despite denials) us to store copies of our keys with. Amazing.

>From:           	AN Other@bankofscotland.co.uk
>To:             	davidh@spidacom.co.uk
>Date sent:      	Mon, 20 Mar 2000 08:58:37 +0000
>Subject:        	Re: Internet HOBS Feedback Submission
>
[snip]
>
>The security of Internet HOBS is a dealt with by our security area 
>and IBM
>who developed the solution, I can assure you that we take it very
>seriously. The business facing area do not know all the details of 
>the
>security in place for 'security' reasons, I apologise for my limited
>knowledge.




 David Hansen | davidh@spidacom.co.uk  | PGP email preferred
 Edinburgh    | CI$ number 100024,3247 | key number F566DA0E