-- James A. Donald > > Or to say the same thing in different words -- why can't > > HTTPS be more like SSH? Why are we seeing a snow storm > > of scam mails trying to get us to login to e-g0ld.com?
Eric Rescorla > Because HTTPS is designed to let you talk to people you've > never talked before, which is an inherently harder problem > than allowing you to talk to people you have. In attempting to solve the hard problem, it fails to make provision for solving the easy problem. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG bZy6QJLI0fL6IOhhS8lxNx/EUctBs0cj1se8YRt5 4LvAbyVinp/3mbNkE+8/qx6UYDSxykTEFMpTXzsoD