Re: SSLeay - Whats the story...

[Enzo Michelangeli <enzo@ima.com>]

On Fri, 4 Aug 1995, Eric Young wrote:

> Do you have a copy of this?

Yes, I've forwarded it to you separately.

> The clear text I don't like, I agree.  But then when used for http, 
> everything begins with a GET anyway.  

Well, ssh and Photuris shows that a better way is possible: do a D-H key 
exchange, then handle anything else (including the authentication of the 
D-H transaction) on the newly established encrypted channel.