Re: Clipper for luggage

2003-11-19 Thread Bill Sommerfeld
[Moderator's note: With this, I'm ending all baggage messages for now. --Perry] It will also mean more peace of mind for passengers worried about reports of increased pilferage from unlocked bags. ... so, TSA people are stealing from unlocked bags. Not necessarily. I was under the

Re: Monoculture

2003-10-01 Thread Bill Sommerfeld
Who on this list just wrote a report on the dangers of Monoculture? An implementation monoculture is more dangerous than a protocol monoculture.. Most exploitable security problems arise from implementation errors, rather than from inherent flaws in the protocol being implemented. And broad

Re: Attacking networks using DHCP, DNS - probably doesn't kill DNSSEC

2003-06-29 Thread Bill Sommerfeld
One key point though: even if DNSSEC was deployed from the root, and a trusted copy of the root key was the client, the search path/default domain must *also* come from a trusted source. Currently, default domain/search path often comes from DHCP, and for nomadic laptops where the relationship to