SSLeay - Whats the story...
Enzo Michelangeli
enzo at ima.com
Fri Aug 4 04:31:05 PDT 1995
On Fri, 4 Aug 1995, Eric Young wrote:
> Do you have a copy of this?
Yes, I've forwarded it to you separately.
> The clear text I don't like, I agree. But then when used for http,
> everything begins with a GET anyway.
Well, ssh and Photuris shows that a better way is possible: do a D-H key
exchange, then handle anything else (including the authentication of the
D-H transaction) on the newly established encrypted channel.
More information about the cypherpunks-legacy
mailing list