[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
D-H telnet protocol
>From: [email protected]
>As I said before, you're free to take what I come up with and add
>authentication. But stop berating me in public for doing something
>to further the use of cryptography.
I'm not berating. I'm just suggesting.
I understand your reasoning about not wanting users to need to do any
administration, and I also understand your desire to do something good
for the crypto community. I will not argue that its a bad thing. The
only provisio I make is that it is SO easy to spoof exponential key
exchange that I'd argue that providing authentication is crucial if
people aren't going to be lulled into a false sense of security.