WinZip to the rescue

[Aaron Trevena]

On 23/11/2007, Nicholas Clark <nick at ccl4.org> wrote:
> I'd already thought a bit about this part, and wondered, isn't it more secure
> to only transmit the password once you have confirmation that the encrypted
> discs have arrived? The reasoning being that unless and until you send the
> password out, they are no better that toasters (or /dev/urandom), so if they
> get lost and no confirmation is ever given, there is no* risk of the data
> escaping.

Of course - that assumes a strong password and strong encryption :)

> Secondly, I was assuming that a phone call (providing each party recognises
> the other's voice) is more secure than a fax, if you care about other
> individuals inside the receiving building (possibly unauthorised)
> intercepting and copying the password, as typical fax machines aren't
> securely located. Although "secure password" probably contains things that
> are hard to spell out, which might make that a bad plan.

Apparently the german police have been having difficulty intercepting
Skype conversations - iirc both voice and text are encrypted -
certainly the text is - so secure lines for all :)

A.

-- 
http://www.aarontrevena.co.uk
LAMP System Integration, Development and Hosting