Re: A mighty fortress is our PKI, Part II

2010-07-29 Thread Alexandre Dulaunoy
   of unauthenticated plaintext must be taken into account when    analyzing a cryptographic protocol. -- --                   Alexandre Dulaunoy (adulau) -- http://www.foo.be/ --                             http://www.foo.be/cgi-bin/wiki.pl/Diary --         Knowledge can create problems, it is not through

Re: A mighty fortress is our PKI, Part II

2010-07-28 Thread Alexandre Dulaunoy
://www.thoughtcrime.org/papers/ocsp-attack.pdf [1] Would be silly to run OCSP over SSL ;-) -- --                   Alexandre Dulaunoy (adulau) -- http://www.foo.be/ --                             http://www.foo.be/cgi-bin/wiki.pl/Diary --         Knowledge can create problems, it is not through ignorance

Re: Bringing Tahoe ideas to HTTP

2009-09-18 Thread Alexandre Dulaunoy
/WebTrustAuditGuidelines.pdf -- -- Alexandre Dulaunoy (adulau) -- http://www.foo.be/ -- http://www.foo.be/cgi-bin/wiki.pl/Diary -- Knowledge can create problems, it is not through ignorance --that we can solve them Isaac

Re: Bringing Tahoe ideas to HTTP

2009-09-17 Thread Alexandre Dulaunoy
/MachineTag -- -- Alexandre Dulaunoy (adulau) -- http://www.foo.be/ -- http://www.foo.be/cgi-bin/wiki.pl/Diary -- Knowledge can create problems, it is not through ignorance --that we can solve them Isaac Asimov

Re: SHA-1 cracked

2005-02-17 Thread Alexandre Dulaunoy
the operation required by the same factor or as the structure of HMAC is so different that the attack is very unlikely to be practical ? -- -- Alexandre Dulaunoy (adulau) -- http://www.foo.be/ -- http://pgp.ael.be:11371/pks/lookup?op=getsearch=0x44E6CBCD