RE: SSL and certificates

• To: "'Michael Brennen'" <mbrennen@fni.com>, "'Www-Security@ns2.rutgers.edu'" <Www-Security@ns2.rutgers.edu>
• Subject: RE: SSL and certificates
• From: Jon Tegethoff <jet@cypher-sage.com>
• Date: Thu, 29 Aug 1996 08:58:52 -0500

On Wed, 28 Aug 1996, Michael Brennen wrote:

>For a commercial application you will need to use ViaCrypt PGP.  There are
>versions for Windows, Mac and many different flavors of Unix.  They don't
>give out source; all distributions are binary. 
>
>http://www.viacrypt.com/
>
>One major reason for using PGP is the simplicity of key management.  In
>DES or IDEA you need a secure channel to exchange keys.  With PGP, key
>management becomes much simpler. 

I believe that this is the major reason for not using PGP for this type 
of application.  The trust model is not solid enough.  Trusted CAs are required!

Jon 

• RE: SSL and certificates
• From: Michael Brennen <mbrennen@fni.com>

• Previous: (Fwd) Alleged security problems with French MSIE V2.0
• Next: Re: Microsoft Merchant Server
• Index(es):
  • Index
  • Thread