... A quick comment about this cipher feedback mode. It is more experimental and is definitly not in the netscape spec. In SSLeay, I added DES (56 bit key)...
Eric Young ...
Jun 30, 1995 1:26 am
2
*Buzzzzzzz* WRONG! SSL can work with any socket enabled program with some work. You will find a SSL telnet in the ftp site for SSLeay.. now if I could...
Aleph One ...
Jun 30, 1995 1:39 am
3
... SSL needs key-renegotiation and error handling before its well suited for any long lasting session. ... Adam (Reality advocate. :) :) -- * Support The Phil...
Adam Shostack ...
Jun 30, 1995 3:34 am
4
... Shouldn't take my statements out of context ... the protocol itself is a good one from the point of view of adding into existing application code. It can...
Tim Hudson ...
Jun 30, 1995 6:55 am
5
... Its not a bad start, but is and could be are quite different. Have you looked at SOCKS? ... This is true, in that vendors don't ship encrypting telnets, ...
Adam Shostack ...
Jun 30, 1995 2:52 pm
6
... SOCKS - as in the firewall stuff ... if so then this is *totally* irrelevant to the discussion - it offers no encryption, no key negotation and is really...
Tim Hudson ...
Jul 1, 1995 2:29 am
7
Using SSL Tunneling to Increase User Privacy Hal Finney ... Abstract A recent proposed Internet Draft suggests an extension to the methods supported by WWW...
Hal ...
Jul 1, 1995 5:17 am
8
hi, i would like to have a copy of the draft on SSL...due to the fact that i'm not able to save the document as a pure text form without HTML markings else i...
Anthony@...
Jul 1, 1995 6:06 am
9
... BTW the way I get these is to use lynx, and hit P for print, then choose "save to a local file". This way you get a nice text version without HTML...
Hal ...
Jul 1, 1995 5:50 pm
10
... I'd like to see someone do a bit of "back of the envelope" figuring to support the argument that SSL is or is not appropriate for telnet. I'm talking to...
cwf@...
Jul 2, 1995 8:25 pm
11
... [...]> > ... [...] People expecting facts -- with real analysis. Refreshing. I realize that there are a number of either block-chaining mechanisms, or...
William C. Archibald ...
Jul 2, 1995 8:34 pm
12
[I tried sending this to ssl-talk-owner, but there's no such address :-(] I just joined. Is an archive of this list available? How about a FAQ? Thanks, -Greg...
Greg Whitehead ...
Jul 3, 1995 8:32 am
13
... But it would do so at a price. It would render the use of caching impossible. It would also deny network providers access to information about traffic...
dmneal@...
Jul 4, 1995 12:19 am
14
... Caching would still be possible in a few different ways. First, each user could have a local cache of recently visited pages on his own machine, as is...
Hal ...
Jul 4, 1995 1:02 am
15
... Even with stream ciphers, you have a minimum of 2 characters for record header (You don't need padding data for the streams), 16 bytes of MAC info, then...
Defender of the Realm...
Jul 4, 1995 10:06 am
16
Hello, Is there no possibility to obtain the SSLRef Package outside from the United States of America? We are living in Luxembourg (EUROPE) Thank's Patrick...
Harpes Patrick ...
Jul 4, 1995 2:25 pm
17
... RC4 is vulnerable to a known-plain-text attack, because the pseudo random stream can be easily recovered from the cryptotext (by XORing the two.) Even if I...
P. Rajaram ...
Jul 5, 1995 3:57 pm
18
An RC4 key should not be used more than once to encrypt data. That means do not encrypt two blocks of data using RC4 with the same key, you can encrypt any...
Could someone forward me a test certificate that I can use to test an implementation of SSL out over the internet? The one I originally got in the sslref...
Chuck McManis ...
Jul 6, 1995 10:34 pm
21
... To make this work, you need the US only version of the navigator, and a certificate from RSA for the ssld. --Jeff -- Jeff Weinstein - Electronic Munitions...
Jeff Weinstein ...
Jul 6, 1995 10:41 pm
22
Thu Jul 6 15:37:11 PDT 1995 To: ssl-talk@... Subject: SSL Question ... Return-Path: mike Date: Jul 6 22:37:10 1995 Message-ID:...
mike@...
Jul 7, 1995 12:46 am
23
... Actually, the export controlled version does offer some encryption primitives. (See $SOCKS/rtelnet/libtelnet/enc_des.c, kerberos.c) But I now understand...
Adam Shostack ...
Jul 7, 1995 6:19 pm
24
... I'm afraid I disagree, when you suggest that attempts should be made to re-establish the connection. In comms terms its a nice idea, but in security terms...
Jeremy Bradley ...
Jul 7, 1995 10:31 pm
25
unsubscribe...
hugh kennedy ...
Jul 8, 1995 2:27 pm
26
Where/how do I get a cert for ssl? Is there a test cert available? What is the cost? I checked some of your docs, and they said check the Netscape Comerse...
Bob Bradley ...
Jul 10, 1995 2:55 am
27
Dear Dr.Kipp E.B Hickman I am Hiroyuki Sakakibara and interested in SSL. I have read SSL standards document, and I have one question. The paper describes some...
H.SAKAKIBARA ...
Jul 10, 1995 6:11 am
28
Dear Dr.Kipp E.B Hickman I am Hiroyuki Sakakibara and interested in SSL. I have read SSL standards document, and I have one question. The paper describes some...
H.SAKAKIBARA ...
Jul 10, 1995 7:08 am
29
Dear Dr.Kipp E.B Hickman I am Hiroyuki Sakakibara and interested in SSL. I have read SSL standards document, and I have one question. The paper describes some...
H.SAKAKIBARA ...
Jul 10, 1995 9:23 am
30
Hi, ... Please note, that according to stupid ITAR you can _not_ export it again!!!! Wolfgang ... Dipl.-Wirtsch.-Inf. Voice: +49 261 6509 173 Wolfgang...