On Sat, 18 Nov 2000, Ben Laurie wrote:

Bram Cohen wrote:

...

And if you build a protocol which is a pain to use, noone will use it.

What, like SSL, for example?

SSL is not a pain to use, and it isn't effective against man in the middle attacks, since an attacker could simply make the end user connection be done via unencrypted http and most end users wouldn't notice. It is, however, quite effective against passive attacks, which is all that's really important. -Bram Cohen