Re: secrets and lies

[Dave Sill]

Adam McKenna <[EMAIL PROTECTED]> wrote:
>On Wed, Nov 15, 2000 at 01:21:40PM -0500, Dave Sill wrote:
>>
>> An audit by some random "security
>> firm" might not mean anything, but an audit by a recognized authority
>> would.
>
>It might.  It also might not, because even the best auditors could miss
>something.

No, it *would* mean something. The fact that audit won't be perfect
and might miss something doesn't mean that audits are worthless, it
just means that they can't guarantee security.

-Dave