-----BEGIN PGP SIGNED MESSAGE----- I want to create a list of companies that accept orders via PGP encrypted email (especially financial companies). Please send me the names of any companies that you know of. The master/current copy of this file is: http://www.offshore.com.ai/security/commerce For general commerce see: http://tns-www.lcs.mit.edu/commerce.html -- Vince Cate vac@cs.cmu.edu - ------------------------------------------------------------------- Motivation for encryption for commerce on the net: Email is a powerful way to communicate. You can easily, quickly, and accurately move information around. However, up till now, email has been unsafe for commerce. Sending credit card numbers or brokerage account numbers in cleartext email is foolish. It is easy for people to read the email as it flows through the net. So we must encrypt any such mail, if we are to send it at all. With PGP, this is now easy. A company could support PGP with a single PC, a printer, and a couple line shell script to decrypt incoming email and print it out. The PGP pass-phrase on the PC could be wired into the script or stored in the environment variable PGPPASS and still be far safer than a phone call or email. If the PC was in a locked room you would have excellent security. Finanical companies could also use PGP signatures for authentication. Currently, most brokers just ask for a name and an account number as authorization, which someone could get from your mailbox or trash. So this current system is not very secure. The company's PGP PC could check PGP signatures and only print out orders for brokers if the signature checked out. This would be very simple and neither the brokers or the rest of the computers at the company need to change in any way. If the email could be fed directly into a trading computer, so much the better. I think we should try to get companies to use PGP to accept encrypted email orders. When you are thinking of ordering a product, ask if you can send the order in as a PGP encrypted email message. - ------------------------------------------------------------------- Public keys for PGP capable companies (key has address): (1) EFF: - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.4 mQCPAi2B6bAAAAEEANVTvM2dhZ0SHsgWOzfn1lRzZcNltsf3Bjt0t5GBuscoyPrD lfBwtzjkZTasK1MfAX/vrUl6BVKb18FCGhuJlmEaZqZ95q5mdsj4tAD18CDg0Jmv bAhWE/JxhhQDG2s9dt5x4GC+ofaHr8nlXKqjyMkb85EyVFHw85hLHLcPIDklABEB AAG0MkVsZWN0cm9uaWMgRnJvbnRpZXIgRm91bmRhdGlvbiAtIEVGRiA8YXNrQGVm Zi5vcmc+iQCVAgUQL+os4hibHbaiMfO5AQEYOAQArtVNhJeRpaShNFd7MQfOFLM9 hql2KBmyvs20/kiwLkGN8Se3GJPYPovBjiB+o9r1GOuc654kxu9KU0m/8SoafWeU p5jBnqlgGwXIo/v5twfKvSnhh75XyGrIwUvlLzxMQaym0slV7YgLUQozWIhuu95d r22qYYdD1PS2SuDpSGGJAJUCBRAtj6o5jC7pCgHDqtsBAVeNA/9ay5pJ7srK7+ns tstaxDe7NnAFLfezgO1yiNED0yM4cDeTNXgZDFNuhzBICmP6fBNSIaUUSwuiQnc8 do45WRo120PX/c+nLoYKeyu8iI0BWA6cjYwk3zKLxpETqpxxKthX6JJ2fxwpL6EQ dF+pmotwtbv3wIH/7FdaZh5r2Nu3/IkAlQIFEC2PJWg2QIGMNPTEcQEBQYoD/2W9 93Yz/c/qmjxpH50blqSPJhd//KYP6AQmmyxI6L+29KqjgflnI56Rk2QUJfs4SnS/ 3jB0H5v9U8u8YocvLsnWL7QvHt0fueoMBk6AFMxgQFzZP3s7dppFncYuiQ710hFL xKu2PFWeurEEZ2VD/KB5fUPdZnwd78bMVj4RIkyJiQCVAgUQLYHqDphLHLcPIDkl AQFBxAP/Q2+RNM218JhEBMcLxoWExWN7wIgIjQF+mZIMvXR9TjhsBtUWQM23XXMi zpQsTCu5/xqTe0OB5no8UfPgktieLyBGFleQgPeXlnmGzcoAeWV6DArFUCN7JKA1 589Zba0/vr4XQpaLgdGInw0nZAYvPKNsKrKl7H37zenmIN9UdTc= =f3Zf - -----END PGP PUBLIC KEY BLOCK----- (2) ViaCrypt: - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3 mQCNAiy8YbkAAAEEAMSUJdkrBnoEHyfJItnzXUYO/6fb9DBFzaJ1Je0NkdJ/y/Jm IsRdikaeC0CvzlZ2sp+xCow1VpRqlv6Wx4qaiviMjh46kBaSqba7vybiInxr67X1 gv4hAo85JWmLSJZsyfmvUhl33S/pYAgtCzA27S0eiLk8dKEiRWhHpCDLdoUBAAUT tB9WaWFDcnlwdCA8UGhvbmUgKDYwMikgOTQ0LTA3NzM+iQCVAgUQLMxa/WV5hLjH qWbdAQH2JgP+NP0IgJ9ArI5jVlwl3l/UCLms5djaFyPasRw1Ydr2XVAgN3bOCBO7 pwS5KLl8nDBY9Fmu/+26j5jCb8WhTGURhOA64gSlEzS62Vlvj9hNZTtp9eKz4RcF /kZGoNER5GqutghHAel8CW7Nbz1yw4XVIUZcGjX4yXBH7cmLHC5gKG+0GFZpYUNy eXB0IDxDSVM6IDcwMzA0LDQxPrQgVmlhQ3J5cHQgPHdrMDE5NjVAd29ybGRsaW5r LmNvbT60HVZpYUNyeXB0IDxGQVggKDYwMikgOTQzLTI2MDE+ =TzvE - -----END PGP PUBLIC KEY BLOCK----- (3) PGPShell - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAivXPYoAAAEEALRKFQztP87axaFBt2DhsdOe5HIRLasTVqJ8IsPGG+jjaNi3 nt5xfB6J/bli2TAQ8YkFxJe4kI3alBfQo1ffv9WGPJVd8DPxcLsKOBhTmVPivURV vcFcyVGEQdTMDBYF8guRbsNxElVV48c4XA513y9iff1KN4MfQZE2Jn5vTkk3AAUR tCtKb2hhbm5lcyBLZXBsZXIgPHN0aWxsQGthaWx1YS5jb2xvcmFkby5lZHU+iQCV AgUQLNR0MUPZe3/QqORdAQEhmwP/W+zsndFyWrTRduz1Sew0S8makVatySijk3gt nyLWSB1jN767ElB420gjI2BO6ptyajT+vZwTrxmoENI3s6TsXeXJAbrEiPde1L4w R+b4dmaWi1GmPVUj98OCDlEW9EDkrGT0yJ7x7Rpk7bCgT3DrvXuJewW2kxdyZoBT lsvWU0iJAJUCBRAs1Crs1OCLV+aunGUBAac7A/wJgIyenH9pz5TLJUK2UvEOPcgh YTjhBSskyFYod/pQVPnSlmLGiT8GvPsMjlsMJAzqUkQ/0LFppddYJLuz1vQFIskX XC9+Nkt14ByJMdI9rBwl9SprnPGotyglrQ2QOueNcFlP35dNo1W86TY9sdra8+/F tGv2JIpygQTsL8iR27QuSm9oYW5uZXMgS2VwbGVyIDxzdGlsbEByaW50aW50aW4u Y29sb3JhZG8uZWR1PrQtSm9oYW5uZXMgS2VwbGVyIDxzdGlsbF9qQGN1Ymxkci5j b2xvcmFkby5lZHU+iQCVAgUQLF8VR3Doj+Cps9nhAQHmDgP+Ln0F8IsS7VUlJzZC DCQVQ5F3MYff06Fl7IbG19gGE5vped1r/xo8o6VT4usYrGiI3pwxenW9YDaHJKBU B6pLJ+BOKQu8EqB+H8CtMGxokBpbTYqJGCFgYmmaO4lDOfXLXv3KhXYlj0y6hSwc wFQp71nVhHsEs18baSVNXP5t+xe0KUphbWVzIFN0aWxsIDxzdGlsbF9qQGN1Ymxk ci5jb2xvcmFkby5lZHU+ =k7lk - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLfkzkCxRemUU0yQdAQEyYgP9FSUn2Lo01XcwitJmmfm5FpOaH2DHnzVh SivaJP4zQSEMYfrEsa4hyEj09Q6KL2BBWuKswIjNh8PA7IDlC+UNoddnT2ANtY6q Vt8fjMzSBtu3Gemm5vsK12oJRw0lxGsNjYd4oVCRfj65WJfogpr4Y9XtUf1u4gpA Q3yh2Eyo3Zo= =GP7M -----END PGP SIGNATURE-----