OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: The problem with SSH2
From: Eric Rescorla (ekrspeedy.rtfm.com)
Date: Fri Dec 29 2000 - 00:20:05 CST

Jeffrey Altman <jaltmancolumbia.edu> writes:

> > This still doesn't establish that it's not covered by the
> > Bellovin-Merritt patents on EKE and A-EKE, which seems to
> > me to be rather an important issue.
>
> I agree it is an important issue. But since (to my knowledge) there
> has never been a claim by Bell Labs that there is such a violation it
> seems a little strange that others are making such a claim.
I'm not saying it is. I'm simply saying it's important to find
out.

> I wonder, has anyone asked Steve Bellovin whether he believes SRP to
> be covered by EKE and A-EKE? In IETF working group meetings in which
> Steve has been present and at which SRP was discussed, I have no
> memory of him taking the position that SRP is indeed covered.
I don't remember him being asked at all.

> I can't say whether SRP is or is not covered by the EKE or A-EKE
> patents because I'm not qualified to make that assessment. But I have
> yet to hear anyone make an argument for why they believe it is
> covered.
Nor have I heard anyone make an argument for why it's NOT covered
clearly it's a similar sort of beast. The fact that I've never
heard such an argument isn't the sort of thing I normally like
to rely on when making such decisions.

-Ekr 

-- 
[Eric Rescorla                                   ekrrtfm.com]
                http://www.rtfm.com/