Re: Maybe It's Snake Oil All the Way Down

4 Jun 2003


      --
James A. Donald
...
...
Or to say the same thing in different words -- why can't
HTTPS be more like SSH?    Why are we seeing a snow storm
of scam mails trying to get us to login to e-g0ld.com?
Eric Rescorla
...
Because HTTPS is designed to let you talk to people you've 
never talked before, which is an inherently harder problem 
than allowing you to talk to people you have.
In attempting to solve the hard problem, it fails to make
provision for solving the easy problem.

    --digsig
         James A. Donald
     6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
     bZy6QJLI0fL6IOhhS8lxNx/EUctBs0cj1se8YRt5
     4LvAbyVinp/3mbNkE+8/qx6UYDSxykTEFMpTXzsoD