PGP source code

Adrian Midgley Adrian Midgley" <akm at 92tr.freeserve.co.uk
Sun, 2 Sep 2001 18:50:59 +0100


..compiling...
> .... was a problem with 6.5.8, as it required an expensive driver
>library (numega? can't remember offhand) to compile some bits of it
(I
>suppose you could just do without those bits - I think PGPdisk and
>PGPnet).

I have never felt the slightest inclination to use either of those so
I would prefer to do without ...

>    ..........and there isn't a hope in hell of the source to
>THAT being available for review.

>It also requires a specific compiler,
Is that absolute?  Or because of the adde libraries?

>and the MS platform SDK and DDKs (any of which are as potentially
>compromised as PGP binaries themselves are)

So something that is available as complete source, and compilable with
a compiler for which the complete source is also avialable, is,
provided the compiler source does not have a backdoor itself which I
am unable to spot and nobody else who is able is willing to tell me
about, is a significantly better bet.

I installed GNU-PG a while ago, I'll get on with understanding it.

Taking this a bit further, given that the source code for the
operating system the NHS seems determined to favour is not available,
except to Chinese visitors, we have no reason to trust the operation
of any program running on it to preserve privacy and had best get on
with moving to Linux or BSD for the desktop.

Or can we trust the X86 microcode (he says risking revealing a
considerable depth of ignorance about what the microcode is, does, or
could be perverted to do)?