TLS-SRP & TLS-PSK support in browsers (Re: Dutch Transport Card Broken)

[Ivan Krstić]

On Feb 1, 2008, at 9:34 PM, Ian G wrote:
> * Browser vendors don't employ security people as we know them on  
> this mailgroup [...]  But they are completely at sea when it comes  
> to systemic security failings or designing new systems.

I don't know about other browsers, but Mozilla's CSO-type is Window  
Snyder who I'd easily describe as a pretty top-notch "security person".

--
Ivan Krstić <krstic at solarsail.hcs.harvard.edu> | http://radian.org
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com