Re: Public Key Infrastructure: An Artifact...

2000-11-19 Thread rsalz
>is trivial. This wouldn't be a problem except for the fact that all >CAs disclaim any and all liability for practical purposes. --Perry] Identrus is interesting because this is exactly what they are *not* doing. Identrus was a Certco creation and, to the extent that they will be issuing identit

Malign SSL server attacks

2000-10-18 Thread rsalz
I am not familiar enough with the protocol to answer this question: is it possible for an evil SSL server to send packets such that it ends up with an arbitrary signature from a client? I'm trying to emphasize the importange of keyUsage bits. :) Thanks.

Re: Lowercase compresses better?

2000-09-29 Thread rsalz
>If the page is basically text, then most of the alphabetic characters >are probably lowercase, so there's a better chance of finding a >patched string in the compression state. Right? Theoretically. But given the vocabulary of HTML tags, what's the chance of matching something other than thems

Lowercase compresses better?

2000-09-29 Thread rsalz
In reading http://apachetoday.com/news_story.php3?ltsn=2000-09-27-001-01-OP-CY-LF I came across the following guideline for writing Apache documentation: HTML tags should be lowercase wherever possible. In other words, 'Link' is preferred over 'Link'. This is because lowercase

"Enigma" moving being made

2000-08-31 Thread rsalz
Our culture desk reports... Mick Jagger's film company (Jagged Films) has spent three years developing "Enigma," a film directed by Michael Apted whose screenplay is a Tom Stoppard adaptation of a Robert Harris novel. The film "deals with a group of British mathematicians and soldiers who were t

Re: names to say in late september

2000-07-27 Thread rsalz
Why does the patent expiration mean the name must change? The patent is independant of any name/licensing issues. Calling it anything other than RSA is boneheaded.