Re: 40 bit encryption: Missing the point

• To: Chuck Yerkes <yerkes_chuck@jpmorgan.com>
• Subject: Re: 40 bit encryption: Missing the point
• From: Karl Auerbach <karl@cavebear.com>
• Date: Mon, 27 Mar 1995 14:19:03 -0800 (PST)
• Cc: www-security@ns2.rutgers.edu
• In-Reply-To: <9503271637.ZM17836@fugit.ny.jpmorgan.com>

>   If it means that Netscape (or cern, or W3) makes their server
> available with 40bit encryption, BUT WITH HOOKS so that I, as the
> buyer, can EASILY replace it

NSA frowns on hooks -- they want any auth/crypto code so intertwined that it
is essentially impossible for anyone to put in a better algorithm. In other
words, once they bless something, they don't want it changed or extended. 

(This will make interesting times for extensible tools, such as Sun's new 
Hot Java. -- they're just one big hook.)

		--karl--

• Re: 40 bit encryption: Missing the point
• From: "Chuck Yerkes" <yerkes_chuck@jpmorgan.com>

• Previous: Re: 40 bit encryption: Missing the point
• Next: Re: 40 bit encryption: Missing the point
• Index(es):
  • Index
  • Thread