On Wed, 30 May 2001, Zak Kipling wrote: > Although in some countries (eg Britain) you can be required by law to > disclose the decryption keys, and imprisoned if you fail to do so. The > only way around this is to use a steganographic approach where, in the > absence of the passphrase for a given set of data, it is impossible even > to prove its existence.
Don't forget those countries where the use of cryptography at all is illegal. If Debian were to implement a cryptography-by-default install, it would also need a non-cryptographic install. The cryptographic install would also only be avaiable via non-US and its mirrors due to export restrictions in certain countries. Hubert.

