RE: client auth security problem?

2000-01-02 Thread Jeffrey Altman
I still don't follow. For example, if Bob has a cert with his name, public key, some encrypted private data, and the CA signature. When Bob sends his cert to a server to make a SSL connection, his cert might be intercepted by John. And then, John could use the same cert to fake as Bob. As

Re: Please help

2000-01-02 Thread Brendan Robert
-Im new to all this. What the plan is for me and a friend to make a -webpage with a few different sections. We would like to be able to -update it from one page. A page that would let us choose what section -it will be added to, write the new news or whatever and post it -automatically and

OpenSSL with Curl - Protecting Username and Passwords on command lines?

2000-01-02 Thread Joe Oravetz
Hi, I've been using Curl enhanced with OpenSSL to gather sensitive information, which requires ascii username and passwords on the command line? I'd like to keep the login information secret. Are there ways to use OpenSSL features to encrypt/filter the Curl command lines to keep prevent

Re: Is it legal?

2000-01-02 Thread Steve Sobol
Vin McLellan wrote: I don't doubt that there are some silly software patents. I watched the 5-7 year debate in the US in the '70s and '80s about what type of intellectual property protection was appropriate for software, however. Young people on this List often presume

Re: Is it legal?

2000-01-02 Thread Dan O'Reilly
At 02:51 PM 1/2/00 -0500, Steve Sobol wrote: Vin McLellan wrote: I don't doubt that there are some silly software patents. I watched the 5-7 year debate in the US in the '70s and '80s about what type of intellectual property protection was appropriate for software,