PGP source code
Ben Laurie
ben at algroup.co.uk
Sat, 01 Sep 2001 20:35:01 +0100
Richard Clayton wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> In article <026701c13283$4034ef00$01c8a8c0@default>, Dave Howe
> <DHowe@Hawkswing.demon.co.uk> writes
>
> >Forwarded - hopefully with signature intact
> >
> >PGP Security is pleased to announce the first public release of its
> >cryptographic source code in downloadable form. The PGPsdk Source
> >Code 2.1.1 release is now available on the PGP website at:
> >
> >http://www.pgp.com/downloads/pgpsdk-agreement.asp
>
> LEGAL NOTICE:
>
> The source code contained herein is not intended to allow the
> development of source code or software for use or distribution. The
> source code included in this archive is licensed pursuant to the
> following terms for Peer Review purposes only. If you wish to
> distribute, compile, modify or otherwise use the source code for any
> reason that is not specifically allowed in this Agreement, you must
> contact Network Associates and negotiate a separate license agreement.
>
> >PGP has a long tradition of releasing source code for purposes of
> >Peer Review to ensure the integrity of the software.
>
> actually, it has a long tradition of doing something rather different
> than this
>
> >For the first
> >time under new US Government export regulations, this source code
> >release is being made available electronically for download to both
> >US and International customers. This source code release is exactly
> >the same code used as the cryptographic foundation for all of the PGP
> >Desktop and Server products.
>
> since one cannot compile it, I cannot see how this statement can be
> verified :-(
Although I entirely agree with the sentiment, it seems to me you _can_
compile it - for the purpose of "Peer Review". Though why I would want
to review something I can't use, I have no idea.
My advice: http://www.gnupg.org/
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff