PGP problems with PMMail 2000 Pro

Steve Lamb pmmail@rpglink.com
Wed, 22 Dec 1999 22:53:08 -0800


On Wed, Dec 22, 1999 at 11:08:21PM -0500, Bill McCarthy wrote:
> I downloaded the full thing, including the source.  You lose - I 
> compiled it myself.  I also use SLRN as my newsreader, which I also 
> compile along with S-LANG - only because I don't like to wait for 
> someone else to do it (J.E. Davis only distributes the .tar.gz 
> source).

    For well over a year I ran Slackware and compiled everything by myself.
In fact, before that I compiled many things on OS/2.  One of the compilations
of SLRN on Hobbes was by me.

    That doesn't mean, however, that you have read the code line-by-line and
therefore have trusted someone else.  That blows your whole argument out of
the water of not trusting the 5.x series based on not trusting someone else
since you already *are* trusting someone else.  As I said, there are open
source, peer reviewed programs out there now that you could use but you refuse
for your own personal, 100% bogus reasons.

> The 5.x series is massive.  I doubt there has been anywhere near the 
> scrutiny that 2.6.x received.

    Yes.  So massive that GPG, which was written from scratch to implement the
algorithms of the 5.x series, is complete and working.  In fact, it is more
standards compliant than the 2.6.x series in that it has options of conforming
to the OpenPGP standard.  

    I just don't see how you can even argue in the face of that.

-- 
         Steve C. Lamb         | I'm your priest, I'm your shrink, I'm your
         ICQ: 5107343          | main connection to the switchboard of souls.
-------------------------------+---------------------------------------------