SSL trouble

[hallam at w3.org]

> I don't get it.  If the challenge is partly secret, how will I
>know if I crack the code?

You don't thats how we make sure that you can't crack the code and not tell 
everyone else.

The servers can be validated by using a standard bit commitment type affair.

Its a matter of principle, we should ensure that the key breaking service is not 
itself subject to cryptanalytic attacks.


One small point, cryptanalysis equipment is also covered by ITAR restrictions.


		Phill