Re: Security and the Government

["Steven M. Bellovin" <smb () research att com>]

In message <Pine.LNX.4.21.0101132146540.31543-100000 () marge spitzner net>, Lance
 Spitzner writes:
> I have no idea where to post this, so I thought I would
> bounce this off the peanut gallery :)
>
> I decided to express some of my concerns about our government's
> computer security to our representatives.  After some searching,
> I found the "SUBCOMMITTEE ON GOVERNMENT MANAGEMENT, INFORMATION 
> AND TECHNOLOGY" at http://www.house.gov/reform/gmit/index.htm.
> The committee is chaired by Congressmen Stephen Horn, who 
> recently released the committee's first report on computer 
> security.
>
> I went to Mr. Horn's website to obtain his email address,
> http://www.house.gov/horn/.  I found the address, but how he
> uses email concerns me.  Remeber, this is one of the lead 
> congressmen involved in the USA's Information Technology.
>
>  "Send e-mail to steve.horn () mail house gov.  Please 
>   include your full name and postal address, including 
>   ZIP code, since I respond by U.S. mail. Thank you."
>
> What can one imply from this .... ?

This is a policy decision that was made because of the lack of digital 
signatures, a suitable PKI, widespread use of a single secure mail 
technology, etc.


                --Steve Bellovin, http://www.research.att.com/~smb


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards