Self Decrypting Archives

[David Shaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, Jun 19, 2003 at 04:22:56PM -0400, Gates, Scott wrote:

> So, SDA's have saved my bacon on more than one occasion.  I have recently
> started using GPG because it lets me call it remotely from an FTP script on
> the local host.  This way I can use JCL (batch to you DOS types) and run my
> file transfers from the master scheduler. This is fine when the recipient
> can receive encrypted e-mail attachments, or FTP.  But the few that need
> LOTS of hand holding to open an e-mail attachment are the ones who give me
> the most headaches, and are also the ones who won't install software. 

But a SDA *is* "installing" something.  What do they think happens
when they click on it?

Try this:

> If you really wanted to, you could even send your receiver a zip file
> containing the "gpg" binary, plus the encrypted file, and a batch file
> that contained something like "gpg theencryptedfile.gpg".  Poof:
> instant SDA.  Of course, it's still insecure ;)

It works, and the end result is a SDA.

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3rc1 (GNU/Linux)
Comment: Key available at http://www.jabberwocky.com/david/keys.asc

iD8DBQE+8iPf4mZch0nhy8kRAvTIAJ9QGZG607c5SVRcbGwG+FK98/dNigCgh9Mv
pgBYhqNgP4KDpWvJaQwO8SY=
=Xn8x
-----END PGP SIGNATURE-----