[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: SSLeay - Whats the story...
On Fri, 4 Aug 1995, Eric Young wrote:
> Do you have a copy of this?
Yes, I've forwarded it to you separately.
> The clear text I don't like, I agree. But then when used for http,
> everything begins with a GET anyway.
Well, ssh and Photuris shows that a better way is possible: do a D-H key
exchange, then handle anything else (including the authentication of the
D-H transaction) on the newly established encrypted channel.