Re: Global PKI on DNS?

On Sat, Jun 08, 2002 at 01:35:42PM -0700, David Conrad wrote: > On 6/8/02 6:22 AM, "Steven M. Bellovin" <[EMAIL PROTECTED]> wrote: > > DNS packets are limited to 512 bytes. > > No they are not. They are limited to 64K. Even without EDNS0, a large > response can fall back to TCP. You know this.

[OT] Re: Securing Telnet

ssh-gw if that is what your after.. Another route is to use the browser based ssh client .. do a search for that.. Since I have not followed for a long time don't know if it does ssh2 or not. -- /* Security

Re: create cert non interactively

passed to openssl commands. > Is it possible. Any help will be highly appreciated. Yes this is standard fare.. You take input & filter & redirect to another program.. wait for success and then return.. Hope that helps. Best Regards, [EMAIL PROTECTED] -- /* Security is

Re: Testing SSL on OpenBSD

hi Sakui, It is onboard in the base install of OpenBSD.. see.. /etc/rc.conf read the comments there on httpd.. bye Sakui wrote: I wondering if someone could giude me on obtaining some code just to see if OpenSSL works on Apache? Sakui  __

Brazil- SSL ?n

> hi, i have misplaced the orginal poster for this thread could they resend directly.. THX __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PRO

Re: Novell Spam

THX it was driving me bonkers..! Dale Peakall wrote: > Would every subscriber in the U.S. please call Novell's toll free number: > 1-800-453-1267 > and ask to speak to D.N. Johnson about the spam on this list. > > It's a disgrace that their software is so broken and is really getting on my > nerv

re: using ssl in http protocol

hi, you might want to try apache.org > if in keep-alive mode, in the server side, how can i recongize a persistent >connection is shut down, and free the preserved resources of it? from the appearence >of http request and response, there seems on obvious steps to tell the server an >persist

Re: SOCKS

hi, you might want to consider AFAIK that there is experimental proxy support in the very latest release. but since i have not investigated other than that YMMV.. Best Regards, [EMAIL PROTECTED] On Mon, 14 Aug 2000, Richard Levitte - VMS Whacke

openssl enc question

hi, have a https server that is doing RSA as well as ok encyption but wanted to change it so it could offer the strongest encryption available using openssl on the pervasive browsers or at least support that if the browser does.. then drop down to a lower grade when that is all that the browse

Re: Verisign/NSI/Thawte monopoly

hi, On Fri, 31 Mar 2000, Mark H. Wood wrote: > On Thu, 30 Mar 2000 [EMAIL PROTECTED] wrote: > > You missed my point. Read on... > > > > > b) Certificates authenticate that the person is who they say they > > > are. hmmm... i have always thought the Certs from CA simply say yeah we know a

RE: Verisign/NSI/Thawte monopoly

hi, IMHO someone should create a central trusted CA that is open sourced for all to trust however that would take some doing..;-)) ..anyone interested:-)) On Tue, 28 Mar 2000, Hostmaster wrote: > There is no governing body that I am aware of. Is it to be yet > another Amercian led thing? That

Re: openssl deperately needs some intro docs

hi all, well am willing to assist in writing the docs.. previous wrote.. the following howtos and would use as basis to write the openssl ones.. a- IPFWADM FAQ b- FIREWALL1 - FAQ c- SSH 1.xx original FAQ(custodian) d - INND FAQ e - SED FAQ well the offers there anyhow.. must admit no veter

Re: openssl deperately needs some intro docs

need someone to write it just give me the data and i will spend the time to write() them.. On Wed, 12 Jan 2000, you wrote: > "Salz, Rich" wrote: > > > > >Why would writing documentation be a problem here? > > > The current regulations prohibit US persons from providing technical > > assistance

Re: client auth security problem?

hi, last time i checked it sends the results as your auth cert.. you do need to enter a passphrase or cache it to produce the unique result that is shuttled to the server. this is the means used to verify you are who you say you are.. what you have, and what you know.. hmmm... which means th

Re: SSL

hi, better yet get linux.. any linux and save yourself the cost of the os period.. comes with apache as well as can pull down open-ssl thanks to the open src and plunk it on your linux box. then just goto any number of rpm or *.tar.gz sites and build the source installing apache-ssl thats abou

Re: ca/cert key gen?

hi, would be interested as well so please let me know Skye when you do locate the info. a few years ago i pursued this to no end result.. if the raw equipment is hand i would be more than happy to assist.. Regards,

cert ?s

hi all, are there any good urls that one could point to step by step setup using thawte as a trusted third party and apache using openssl? also what is the procedure if one wishes not only to confirm to the client that the server is legit but also to confirm in reverse.. IOW that the cli

Re: Make errors on LInux

hi, i have noticed that myself on the most recent linux based implementations you need to pull down the development libraries for the linux version you are using and install it. for some reason these are not installed in the custom, workstation, or server installs for rpm based systems. i have

Re: source for PC

hi, i can't remember the program on linux that will uncompress *.LZH files anyone? now for more related what are the costs of thawte for a certificate/yr and is there a url on howto install thawte for certification? Does anyone know if there is a linux based Certificate Server?