-----BEGIN PGP SIGNED MESSAGE-----

In message <9304190956.AA10390@pizzabox.demon.co.uk> you write:

[...]


I'd lost the White House's deathless prose when I posted (that's what happens
when you read news at home when you're rat-arsed), but I did have a bunch
of follow-ups going on about cellular/cordless comms.  The original article
has reappeared, so:

    The President today announced a new initiative that will bring
    the Federal Government together with industry in a voluntary
    program to improve the security and privacy of telephone
    communications while meeting the legitimate needs of law
    enforcement.

Hmm, telephone communications could indeed include end-to-end encryption on
ordinary landlines.

    The initiative will involve the creation of new products to
    accelerate the development and use of advanced and secure
    telecommunications networks and wireless communications links.

But the next paragraph says telecoms networks and wireless communications
links.

OK, it's far from clear exactly what Cripple (what an apposite anagram) will
be applied to, but the reason Joe Public wants secure comms is to stop
people listening in to his cellular or cordless phones (and he wouldn't
even be bothered about that were it not for Wingnut and Squidqy's
misfortunes).

Yes, Cripple *might* be for end-to-end encyption, dropping to clear
when the other end doesn't have Cripple.  But then a cordless-to-ordinary
conversation would be in clear leaving the cordless end just as vulnerable
as at present.  Nope, I suspect that Cripple will only be used on radio
links.

OK, it's possible `telecommunications networks' could mean `ordinary phone
lines', but I'm betting it means the microwave links used by the telcos.

My apologies if I'm wrong, particularly if the turgid Press Release makes it
clear that I'm wrong and I missed it, but as far as I can see it was full of
obfuscation, and anyone expecting end-to-end encryption is in for a surprise
(IMHO).


BTW, Graham, I've posted questions to alt.security.pgp and not seen any
replies/followups from outside Europe - how about you?  Have I made it into
everyone's kill file, or is there some problem?

- --Paul

-----BEGIN PGP SIGNATURE-----
Version: 2.2