From: Herb Sutter <herbs@interlog.com>
Date: Mon, 25 Sep 95 13:39:55 PDT
To: Jon Lasser <jlasser@rwd.goucher.edu>
Subject: Re: Notes security question
Message-ID: <199509252039.QAA12982@gold.interlog.com>
MIME-Version: 1.0
Content-Type: text/plain


At 14:52 1995.09.25 -0400, Jon Lasser wrote:
>On Fri, 22 Sep 1995, Herb Sutter wrote:
>
>> While I'm at it, here's a question I've been wondering about recently: Why
>> is it I've never heard of any security issues with Lotus Notes?  Are there
>> no known weaknesses?  Or did existing weaknesses just not get much press
>> because Notes isn't a commercially visible consumer product like Netscape?
>
>Perhaps the Notes pricing scheme is sooo outrageous (by the standards of 
>a student like myself, and probably most others, if it's still anything 
>like it was at the 1.0 release) that mostpeople have had zero opportunity 
>to examine the program, let alone really have time to play with it?

Good point.  However, since it's been around for years and is (in some
people's eyes, at least) cutting-edge secure replication technology, it made
me begin to wonder about the product's actual security.  All I know is that
they use one of RSADSI's libraries, since RSADSI mentions them in their
"here are our current users" advertising.

From the deafening silence, though, it seems like there's not a whole lot of
information or opinion either way on Notes' security...?

Herb

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Herb Sutter                 2228 Urwin, Suite 102       voice (416) 618-0184
Connected Object Solutions  Oakville ON Canada L6L 2T2    fax (905) 847-6019