Re: Security from Rich Salz on 2001-03-16 (xml-dist-app@w3.org from March 2001)

From: Rich Salz <rsalz@zolera.com>
Date: Fri, 16 Mar 2001 15:54:50 -0500
To: Joseph Ashwood <jashwood@arcot.com>
CC: xml-dist-app@w3.org
Message-ID: <3AB27D9A.F3F918C0@zolera.com>

> An extra round is not necessarily required. Each request could carry an
> associated list of preferred ciphers. The information propogation would be
> slow, and the first would be unprotected

And therefore isn't that susceptible to man-in-the-middle?  I thought
this was one of the things TLS fixed in SSL.
	/r$

Received on Friday, 16 March 2001 15:54:19 UTC