Maybe It's Snake Oil All the Way Down

[James A. Donald]

    --
James A. Donald
> > Or to say the same thing in different words -- why can't
> > HTTPS be more like SSH?    Why are we seeing a snow storm
> > of scam mails trying to get us to login to e-g0ld.com?

Eric Rescorla
> Because HTTPS is designed to let you talk to people you've 
> never talked before, which is an inherently harder problem 
> than allowing you to talk to people you have.

In attempting to solve the hard problem, it fails to make
provision for solving the easy problem.

    --digsig
         James A. Donald
     6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
     bZy6QJLI0fL6IOhhS8lxNx/EUctBs0cj1se8YRt5
     4LvAbyVinp/3mbNkE+8/qx6UYDSxykTEFMpTXzsoD


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com