17 Dec
2003
17 Dec
'03
11:17 p.m.
On Fri, 4 Aug 1995, Eric Young wrote:
Do you have a copy of this?
Yes, I've forwarded it to you separately.
The clear text I don't like, I agree. But then when used for http, everything begins with a GET anyway.
Well, ssh and Photuris shows that a better way is possible: do a D-H key exchange, then handle anything else (including the authentication of the D-H transaction) on the newly established encrypted channel.