Date: Thu, 16 Mar 2000 14:55:59 -0800 (PST) From: "Eric J. Schwertfeger" <ejs@bfd.com> To: goodleaf <john@home.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Off Topic AND Newbie-ish! Security... Message-ID: <Pine.BSF.4.10.10003161446230.19094-100000@harlie.bfd.com> In-Reply-To: <Pine.BSF.4.21.0003161410210.20064-100000@C702312-A.sttln1.wa.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 16 Mar 2000, goodleaf wrote: > Apologies for off-topic post. <sycophant>But the people on this list have > the highest average competence I know of--mailing list wise.</sycophant> > > How secure is a pkzipped file that has been zipped with a password? My > company is considering exchanging data, possibly sensitive, with another > company who wants to "encrypt" by pkzipping to a password. Isn't the > algorithm for pkzip too well known to be secure? I haven't heard of anyone breaking it, but it isn't considered cryptographically strong, since it's just an XOR algorithm. > I think they want to use it because they can easily call it from a command > line; they batch data from their dbase and ship it out to us. They don't > like human intervention, and pkzip works with batch files. Does PGP (Yes, > we would pay for appropriate licenses.) have a similar capability? Yes, it has that ability. Also, GPG is a gnu version of PGP that is GPL and unencumbered, and we use it here for exactly what you're talking about doing. Of course, we specified that when sending information to clients, we would encrypt but not sign the data, as signing would require private keys without a passphrase or human interaction. There is a Win95/NT port, but it wasn't done by the maintainers as far as I can tell, so I'm not sure where to find it or if it is command-line scriptable. You can find more info on GPG (it's in the ports) at http://www.gnupg.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10003161446230.19094-100000>