On Fri, Dec 01, 2000 at 02:23:45PM -0600, Larry Paul wrote:
> This now makes sense. If the NSA can replace the key, anyone can and hence
> strengthen their security. For example: only A and B have the same embedded
> key & can communicate securly. Is this correct?
well.. it is not a communication key. It is just a key to check the
signature on a cabinet file. So you can install a new crypto provider
featuring new and batter crypto methods. The reason was for MS to be able to
deploy "unexportable" crypto code without beeing accused of delivering
"hooks" (by itar).
Greetings
Bernd
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]