OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [OT] SSL Cert recommendation

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Sat May 17 2008 - 22:08:52 CDT


On Sun, May 18, 2008 at 12:00:54AM -0300, Arturo 'Buanzo' Busleiman wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Victor Duchovni wrote:
> | the rest is marketing.
>
> Tell me about it:
>
> http://www.freesoftwaremagazine.com/columns/interview_with_arturo_busleiman

Seems pretty naive to me (sorry about that). I think a much better bet
is TLS PSK and even this has to overcome tremendoes inertia and needs
well thought-out browser implementations (IMHO, don't prompt for the
pre-shared password, instead retrieve from a keystore unlocked when the
browser starts, Keychain on MacOS X).

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.