My PC:
Windows 7 Ultimate SP1 x64
PGP 10.1.2 (build 9) from Pretty Good Privacy, Inc.
My wife's PC
Windows XP SP3 x32
PGP 8.0.3 from PGP Corp.
The source code of both of these versions were available to the public
to examine. Several individuals unaffiliated with the developers
reviewed the source code and concluded there were no backdoors. They
even compiled to source code and compared it with the binaries the
developers were distributing and verified that the results were indeed
the same. As far as I can tell, PGP 10.1.2 was the last version such
independent reviews were possible. After that version, the developer
(Pretty Good Privacy, Inc.) would not release the source code.
My software archive contains the installers for both versions of PGP as
well as other versions. While I can provide them, I cannot be held to
authenticate the files. If you want a copy of either, reply in this
newsgroup thread.
I notice the installer package for 8.0.3 is a Zip file that includes the
installer and a detached OpenPGP signature. With 10.1.2, I was able to
verify the signature against the installer file. The detached signature
was created by a public key that was already on my keyring. That public
key was signed by Philip Zimmermann -- the original developer of PGP --
in 2002. Although Zimmermann's signing key expired in 2003, that does
not invalidate the key that signed the installer and still provides some
assurance of the authenticity of the installer.
I do not have a detached signature for 10.1.2.
--
David E. Ross
"A Message to Those Who Are Not Vaccinated"
See my <
http://www.rossde.com/index.html#vaccine>.