OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] JaPCrypt

Valdis.Kletnieksvt.edu
Date: Wed Feb 06 2008 - 09:42:19 CST


On Wed, 06 Feb 2008 03:59:30 PST, coderman said:

> since psk without key distribution nor secure secret exchange does not
> solve the problems that HTTPS solves, to say this is useful in
> situations where HTTPS is not available is disingenuous.

Sure. So you e-mail the shared secret in a PGP or S/MIME encrypted mail.

So saying that it doesn't work because there's no secure secret exchange
is disingenuous as well.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFHqdVbcC3lWbTT17ARAnHFAKCZiKACMWmVUzSx8eCYuJbpHI5QMgCgnZ61
cHz35Ws8F1CeyswfyKE99b0=
=robt
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/