Re: Apache SSL Private Keys

[Rich Salz]

The difference is that with a passphrase the rooter must be an active
attacker with an active compromise on your machine, as opposed to a
non-pass phrase which can be a passive attacker trying to snarf a single
file.  More than just warm fuzzy; the first is just downright harder.
        /r$
-- 
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]