From: Dave Crocker <dcrocker@brandenburg.com>
Date: Wed, 16 Aug 95 22:18:01 PDT
To: Jason Weisberger <jweis@primenet.com>
Subject: Re: Phone call for Mr. Doligez, was Re: SSL challenge -- broken !
Message-ID: <v03002b05ac587f94b403@[204.118.88.53]>
MIME-Version: 1.0
Content-Type: text/plain


At 11:32 AM 8/16/95, Jason Weisberger wrote:
>like using a "security envelope" to mail cash or putting the club on your
>car.  It presents just enough of an obstacle to keep honest people honest.

        As the Mitnick experience shows, the vulnerability of the
providers' host systems is a concern not addressed by link-oriented schemes
such as SSL.  Longer keys for SSL would not have improved the protection on
the 30,000 credit card numbers he stole.

d/

--------------------
Dave Crocker                                                +1 408 246 8253
Brandenburg Consulting                                fax:  +1 408 249 6205
675 Spruce Dr.                                       page:  +1 408 581 1174
Sunnyvale, CA  94086 USA                           dcrocker@brandenburg.com