Re: migration paradigm (was: Is PGP broken?)

2000-12-09 Thread Rick Smith at Secure Computing
At 02:43 PM 12/7/00, Peter Fairbrother wrote: In WW2 SOE and OSS used original poems which were often pornographic. See "Between Silk and Cyanide" by Leo Marks for a harrowing account. Yes, a terrific book. However, the book also contains an important lesson regarding human memory. Marks was

Re: migration paradigm (was: Is PGP broken?)

2000-12-07 Thread Rick Smith at Secure Computing
At 05:04 PM 12/5/00, Ray Dillinger wrote: If someone wants to enter "sex" as a password, s/he deserves what s/he gets (although you may put up an "insecure passphrase" warning box for him/her). The problem is that there's no objective way of knowing when a passphrase becomes 'insecure' since

Windows secure channels

2000-10-10 Thread Rick Smith at Secure Computing
I've been trying to track down some information for my authentication book, and I'm currently wrestling with the lack of easy to find Microsoft internal specs. So I thought I'd ask the community. I've been writing about what I call "indirect authentication" which refers to the use of an