Re: patches for the build/aix area - httpd-2.2.x

2013-12-07 Thread Michael Felt
>From another test I found an unexpected side-effect and have modified mkinstallp.ksh so that all directories retain r-x permissions. To keep it simple the complete patch of the directory build/aix for "existing" files. On Fri, Dec 6, 2013 at 12:15 PM, Michael Felt wrote: > I realize I shoul

Re: symmetric aes key

2013-12-07 Thread Yann Ylavic
On Sat, Dec 7, 2013 at 11:52 AM, Michael Felt wrote: > imho - it is a bad idea to store a session encryption key. I think the > whole idea behind dynamic keys is that they are not stored. PKI is used to > negotiate a key. > > If the session keys are static then, again imho, time would be better >

Re: symmetric aes key

2013-12-07 Thread Michael Felt
imho - it is a bad idea to store a session encryption key. I think the whole idea behind dynamic keys is that they are not stored. PKI is used to negotiate a key. If the session keys are static then, again imho, time would be better spent on code to establish dynamic session keys - that can be ree