|
Sending Sensitive Information to SGI
It is important that you encrypt sensitive information, and we urge you to do so. SGI® can exchange email with you using PGP®. Please check our PGP signature on email and documents. PGP (Pretty Good Privacy®) is a powerful cryptographic product family that makes it possible to securely exchange messages, and to secure files, disk volumes and network connections with privacy and authentication. You should not trust unvalidated PGP keys. In the past, forged PGP keys were uploaded to public keyservers. It's a good security practice to validate any PGP key you receive to ensure its legitimacy. This is the PGP Public Key for the SGI Customer Security Coordinator:
The public key used to verify SGI ProPacks can be found here. Where to Find the SGI PGP Key The SGI PGP public RSA key provides maximum interoperability with as many versions of PGP as possible. It is available from the SGI web site or from any of the PGP Public Key Servers such as the ones at Network Associates, Inc. and Massachusetts Institute of Technology. You can get a freeware version of PGP 6.5.8 for many operating systems from the Massachusetts Institute of Technology web site. It supports both RSA and Diffie-Hellman keys, though this version's file format is different from 2.6.x and previous versions. Also available is the GNU Privacy Guard (GPG). It's a complete and free replacement for PGP. Checking our PGP Signature on Mail Messages and Documents Many SGI documents are signed with the SGI PGP key. We encourage you to check the signature to ensure that the document was indeed written by our staff and has not been changed.
| ||