[PL] PGP description is wrong

[Iain Cheyne]

http://pricelesswarehome.org/2005/PL2005SECURITY.php#EncryptionTool

This is what is currently written:

Description: PGP® or Pretty Good Privacy® is a public key encryption
program originally written by Phil Zimmermann in 1991. PGP is a powerful
cryptographic product family that enables people to securely exchange email
messages, and to secure files, disk volumes and network connections with
both privacy and strong authentication.

http://www.pgp.com/downloads/freeware/index.html says this:

PGP Freeware product capabilities/limitations:

* Does not include PGP Disk
* Does not include automatic encryption of email file attachments
* Does not provide plug-in integration with Outlook, Outlook Express,

or other email applications on any platform

* Does not operate with PGP Admin or other PGP deployment tools

Therefore, the description should read:

Description: PGP® or Pretty Good Privacy® is a public key encryption
program, enabling people to securely exchange email messages.

 

[Susan Bugher]

http://pricelesswarehome.org/2005/PL2005SECURITY.php#EncryptionTool

This is what is currently written:

Description: PGP® or Pretty Good Privacy® is a public key encryption
program originally written by Phil Zimmermann in 1991. PGP is a powerful
cryptographic product family that enables people to securely exchange email
messages, and to secure files, disk volumes and network connections with
both privacy and strong authentication.

http://www.pgp.com/downloads/freeware/index.html says this:



or other email applications on any platform


Therefore, the description should read:

Description: PGP® or Pretty Good Privacy® is a public key encryption
program, enabling people to securely exchange email messages.

It does do file encryption. At the top of the page it says: "PGP
Freeware offers basic PGP encryption capability for messages and files,
but does not include many features available in other PGP products."

I looked for a *real* description last December but couldn't find one. I
need some help from the people who use this app. What *can* version 8.1
do? Is there a description in the help file we can use?

The PL description is here:

http://www.pricelesswarehome.org/2005/PL2005SECURITY.php#0583-PW

Susan

 

[Iain Cheyne]

I installed it and saw nothing obvious that would help me with file
encryption. I uninstalled it, so I cannot tell you about the help file.

 

[REM]

Susan Bugher <[email protected]> wrote:

It does do file encryption. At the top of the page it says: "PGP
Freeware offers basic PGP encryption capability for messages and files,
but does not include many features available in other PGP products."

I looked for a *real* description last December but couldn't find one. I
need some help from the people who use this app. What *can* version 8.1
do? Is there a description in the help file we can use?

The PL description is here:

http://www.pricelesswarehome.org/2005/PL2005SECURITY.php#0583-PW

The good news is that PGP was acquired from NAI and Phil Zimmermann is
back.

The bad news is that the freeware version can easily be dubbed
crippleware, depending on exactly what the user desires. The new
corporation is out to make a profit.

http://www.pgp.com/downloads/freeware/index.html

Even for email encryption, operations are crippled. It looks like file
encryption is the only portion not crippled. There is no PGPDisk in
the freeware version.


I suggest TrueCrypt, which is a full blown open source clone of the
commercial version of PGP for Win XP, 2000, and 2003.

http://truecrypt.sourceforge.net/



Can anyone make better recommendations here?

Win 9x-ME might have to rely on Encryption for the Masses:

http://www.woundedmoon.org/win32/e4m202a.html

Or ScramDisk:

http://www.woundedmoon.org/win32/sd301r3c.html

These don't do email, but a text file can be encrypted and attached,
or pasted into the message body. This isn't all that far from the
actions required for the crippled PGP freeware.

For DOS disk encryption: Secure File System

http://www.woundedmoon.org/msdos.html

 

[Susan Bugher]

The good news is that PGP was acquired from NAI and Phil Zimmermann is
back.

The bad news is that the freeware version can easily be dubbed
crippleware, depending on exactly what the user desires. The new
corporation is out to make a profit.

http://www.pgp.com/downloads/freeware/index.html

Even for email encryption, operations are crippled. It looks like file
encryption is the only portion not crippled. There is no PGPDisk in
the freeware version.

Okay. FWIW:

"PGP Desktop Feature Comparison"
http://www.pgp.com/library/datasheets/index.html

That page doesn't include the free version. . .

I suggest TrueCrypt, which is a full blown open source clone of the
commercial version of PGP for Win XP, 2000, and 2003.

http://truecrypt.sourceforge.net/

Can anyone make better recommendations here?

Whoa Nellie. I'm just trying to tidy up the PL2005 PGP description.

TrueCrypt was nominated for PL2005 - it didn't make the cut - maybe it
will next year. . .

I'll change the PGP description from Freeware to Liteware.

What should I take out of the sentence below? Is there anything I should
add? Perhaps leave that sentence - which describes the "product family"
and add another sentence about the freeware version?

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages, and to secure files, disk volumes and
network connections with both privacy and strong authentication."

TIA

Susan

 

[REM]

Whoa Nellie. I'm just trying to tidy up the PL2005 PGP description.

Just trying to locate the best programs.

TrueCrypt was nominated for PL2005 - it didn't make the cut - maybe it
will next year. . .

I'll change the PGP description from Freeware to Liteware.

What should I take out of the sentence below? Is there anything I should
add? Perhaps leave that sentence - which describes the "product family"
and add another sentence about the freeware version?

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages, and to secure files, disk volumes and
network connections with both privacy and strong authentication."

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages and to encrypt files. Previously the
standard in freeware strong, open source cryptography, the program has
moved very far into the commercial arena The freeware version is
severely limited in comparison to other quality programs."

That's what I'd say. Is there anyway to review the features between
PGP freeware and TrueCrypt open source and reconsider the PL
recommendation here?

I'd rate PGP severly crippled and TrueCrypt priceless.

 

[Susan Bugher]

Just trying to locate the best programs.

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages and to encrypt files. Previously the
standard in freeware strong, open source cryptography, the program has
moved very far into the commercial arena The freeware version is
severely limited in comparison to other quality programs."

That's what I'd say. Is there anyway to review the features between
PGP freeware and TrueCrypt open source and reconsider the PL
recommendation here?

I'd rate PGP severly crippled and TrueCrypt priceless.

It is possible to reconsider now if the group wants to but IMO it's not
our best course of action. ISTM "cumparison" discussions should take
place *during* the PL selection process - not afterward.

We had a month to discuss the pros and cons of these two apps prior to
the vote and more time for discussion afterward. If we failed to have an
adequate discussion during the PL selection process I don't think we
should reopen the PL2005 discussion now in hopes of doing better. . .

IMO once we have selected an app for the PL it should be removed only
for "cause": it's payware, adware, spyware etc.

my 2 cents worth. . .

FWIW the vote was close, 9 for PGP, 8 for TrueCrypt.

Susan

 

[Iain Cheyne]

Me too. I cannot understand why PGP was voted Pricelessware.

IMO once we have selected an app for the PL it should be removed only

for "cause": it's payware, adware, spyware etc.

I agree with this as well. The people have spoken, even if it was a
strange decision.

REM's text is OK, but too strong. I prefer:

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages and to encrypt files. The freeware
version is severely limited in comparison to the payware version."

 

[Susan Bugher]

Me too. I cannot understand why PGP was voted Pricelessware.


I agree with this as well. The people have spoken, even if it was a
strange decision.

My hunch is that many people are using older versions of PGP. AFAIK
these are still available for download - we might want to discuss
changing the *version* that's shown on the PL.

REM's text is OK, but too strong. I prefer:

"PGP is a powerful cryptographic product family that enables people to
securely exchange email messages and to encrypt files. The freeware
version is severely limited in comparison to the payware version."

I finished a bunch of updates and revisions and uploaded a revised set
of PL pages - with a somewhat revised description for PGP. Further
changes in the PGP description can be made as needed.

Susan

 

[Charles D. Bohne]

My hunch is that many people are using older versions of PGP. AFAIK
these are still available for download - we might want to discuss
changing the *version* that's shown on the PL.

I still use PGP602i ... it includes the "PGP-Disk" encryption ....
it worked on W98/W98se/Millenium/Nt4 (Workstation & Server),
W2K (including Advanced Server!) and now I use it with Windows
XP (Media Edition even).... pretty fine Freeware .. and priceless as
well

HTH.
C.

 

[Henry The Mole]

Hello, Charles!
You wrote on Thu, 27 Jan 2005 02:34:22 +0100:

I still use PGP602i ... it includes the "PGP-Disk" encryption ....
it worked on W98/W98se/Millenium/Nt4 (Workstation & Server),
W2K (including Advanced Server!) and now I use it with Windows
XP (Media Edition even).... pretty fine Freeware .. and priceless as
well

So... could this be considered last fully freeware version of PGP or are
there later versions fully usable?

Best regards.

 

[REM]

I still use PGP602i ... it includes the "PGP-Disk" encryption ....
it worked on W98/W98se/Millenium/Nt4 (Workstation & Server),
W2K (including Advanced Server!) and now I use it with Windows
XP (Media Edition even).... pretty fine Freeware .. and priceless as
well

That's a pretty old version. I didn't even recall it. A good program
is still a good program though. This might be the better program to
list.

 

[Susan Bugher]

Hello, Charles!
You wrote on Thu, 27 Jan 2005 02:34:22 +0100:


So... could this be considered last fully freeware version of PGP or are
there later versions fully usable?

Good question.

Freeware information is here:
http://www.pgpi.org/products/pgp/versions/freeware/

re available versions - v 6.0.2i and later are listed below:

PGP 6.0.2i (95/98/NT)
PGP 6.5.1i (95/98/NT)
PGP 6.5.3 (9x/NT/2000)
PGP 6.5.8 (9x/NT/2000)
PGP 7.0.3 (9x/ME/NT/2000)
PGP 8.0 (98/ME/NT/2000/XP)

Feedback from PGP users please. What limitations (if any) does version
8.0 have that earlier versions don't have.

PGP 8.1 (98/ME/NT/2000/XP) - this is the current (crippled) version

Susan

 

[Henry The Mole]

Hello, Susan!
You wrote on Thu, 27 Jan 2005 10:08:23 -0500:

Feedback from PGP users please. What limitations (if any) does version
8.0 have that earlier versions don't have.

6.0.2i seems to be last version including PGPdisk.
Read here: http://www.pgpi.org/products/pgpdisk/

However, discussing with CoMa on ICQ, he found this:
http://www.pgpi.org/doc/bugs/win/

It seems that the PGP plugin for OE just works for version 4.x and not for
later versions: someone could confirm this incompatibility?

Kindly regards.

 

[Charles D. Bohne]

That's a pretty old version. I didn't even recall it. A good program
is still a good program though. This might be the better program to
list.

Why not ask "the master himself", Philip Zimmerman?

"Philip R. Zimmerman" (e-mail address removed)

http://www.connected-earth.com/Jour...ternetage/PhilipZimmerman/philipzimmerman.htm

He always fought for his free-ware versions...

C.

 

[Susan Bugher]

Hello, Susan!
You wrote on Thu, 27 Jan 2005 10:08:23 -0500:




6.0.2i seems to be last version including PGPdisk.
Read here: http://www.pgpi.org/products/pgpdisk/

However, discussing with CoMa on ICQ, he found this:
http://www.pgpi.org/doc/bugs/win/

It seems that the PGP plugin for OE just works for version 4.x and not for
later versions: someone could confirm this incompatibility?

I found information about the features in version 7.0 here:

ftp://ftp.pgpi.org/pub/pgp/7.0/docs/english/PGPWinUsersGuide.pdf

<Q>

PGP features
PGP offers several features and utilities to help you secure your email,
files, disk, and network traffic with encryption and authentication.
Here is what you can do with PGP:

• Encrypt/sign and decrypt/verify within any application. With the PGP
menus and email plug-ins, you can access PGP functions while in any
application. To learn how to access PGP, see Chapter 2, “A Quick Tour of
PGP.” To learn how to encrypt/sign and decrypt/verify, see “Part III:
Securing Your Files and Communications.”

• Create and manage keys. Use PGPkeys to create, view, and maintain your
own PGP key pair as well as any public keys of other users that you have
added to your public keyring. To learn how to create a key pair, see
Chapter 3, “Making and Exchanging Keys.” To learn about managing your
keys, see Chapter 4, “Managing Keys.”

• Create self-decrypting archives (SDAs). You can create self-decrypting
executable files that anyone can decrypt with the proper password. This
feature is especially convenient for sending encrypted files to people
who do not have PGP installed. Formore information about SDAs, see
Chapter 6, “Securing Files.”

• Permanently erase files, folders, and free disk space. You can use the
PGP Wipe utility to thoroughly delete your sensitive files and folders
without leaving fragments of their data behind. You can also use PGP
Free Space Wiper to erase the free disk space on your hard drive that
contains data frompreviously deleted files and programs. Both utilities
ensure that your deleted data is unrecoverable. To learn about file,
folder, and free space wiping, see “Permanently erasing files and free
disk space” on page 110.

• Secure network traffic. You can use PGPnet, a Virtual Private Network
(VPN), to communicate securely and economically with other PGPnet users
over the internet. To learn more about PGPnet and its components, see
“Part IV: Securing Your Network Communications with PGPnet.”


</Q>

I haven't been able to find similar info for version 8.

Susan

 

[Charles D. Bohne]

It seems that the PGP plugin for OE just works for version 4.x and not for
later versions: someone could confirm this incompatibility?

It works with Outlook 2002 (10.6515.6714) Sp3 ... I did not install the
plug-in for OE ... but you can easily "sign and/or sign and encrypt"
every mail (as well as any other text) by marking it ... copying it to
the clipboard .. and re-pasting it to its still marked location, all in
a matter of seconds ...
HTH.
C.

 

[REM]

Why not ask "the master himself", Philip Zimmerman?

"Philip R. Zimmerman" (e-mail address removed)

He always fought for his free-ware versions...

Well, he's "reselling" the current version of PGP. Everyone has to
make a living I guess. Real life can be a drag, even with the best of
intentions. As I recall, he doesn't personally back these
international versions, as other people wrote them. And he has the
obvious clout to direct development into a freeware version worth
having... not so with the current version.

 

[Charles D. Bohne]

Well, he's "reselling" the current version of PGP. Everyone has to
make a living I guess. Real life can be a drag, even with the best of
intentions. As I recall, he doesn't personally back these
international versions, as other people wrote them. And he has the
obvious clout to direct development into a freeware version worth
having... not so with the current version.

Well, if you remember how he got under fire and that the secret
services, as well as the FBI, tried to outlaw the use of his program, I
started to wonder why - all of a sudden - the very same people began to
recommend the later PGP versions .... . As I told you before - it
still is a good program and even so the plug-in for OE might not work
with version 5 (and up?) it does so with Outlook seamlessly.
Cheers,
C.

 

[CoMa]

Well, if you remember how he got under fire and that the secret
services, as well as the FBI, tried to outlaw the use of his program, I
started to wonder why - all of a sudden - the very same people began to
recommend the later PGP versions .... . As I told you before - it
still is a good program and even so the plug-in for OE might not work
with version 5 (and up?) it does so with Outlook seamlessly.
Cheers,
C.

You can alway use this
GnuPG (GNU Privacy Guard)
http://www.gnupg.org/

GnuPG is a complete and free replacement for PGP.
Because it does not use the patented IDEA algorithm,
it can be used without any restrictions. GnuPG is a
RFC2440 (OpenPGP) compliant application.

The current stable version is 1.4.0.

GnuPG is Free Software.
It can be freely used, modified and distributed
under the terms of the GNU General Public License.

GnuPG itself is a commandline tool without any graphical stuff.

Here are 2 popular GnuPG GUI frontends for Windows users
GPGshell
http://www.jumaros.de/rsoft/index.html

WinPT (has a OE plugin)
http://winpt.sourceforge.net/en/


/CoMa