RE: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Lucky Green
Ian Grigg wrote: > Also, a lot of cryptosystems are put together > by committees. SSH was originally put together > by one guy. He did the lot. Allegedly, a fairly > grotty protocol with a number of weakneses, but > it was there and up and running. And SSH-2 is > apparantly nice, elegant and ea

Typical PGP user mistakes

2003-06-03 Thread Major Variola (ret.)
I recall reading at least one study of learning PGP and its UI. I have had the chance to observe half a dozen (albeit, smarter than normal) others' (mostly engineers) learning curves. All are using PGP 7.03 and Eudora 3.05. We are not using public key servers. Mistakes include: * neglecting to enc

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Tim May
On Monday, June 2, 2003, at 07:09 AM, Ian Grigg wrote: PGP was also mildly successful, and was done by one guy, PRZ. The vision was very clear. All others had to do was to fix the bugs... Sadly, free versions never quite made the jump into GUI mail clients, so widespread success was denied to

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Eric Rescorla
Ian Grigg <[EMAIL PROTECTED]> writes: > Eric Murray wrote: > It may be that the SSL underlying code is > perfect. But that the application is weak > because the implementor didn't understand > how to drive it; in which case, if he can > roll his own, he may end up with a more > secure overall pac

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Ian Grigg
Eric Murray wrote: > > On Mon, Jun 02, 2003 at 10:09:06AM -0400, Ian Grigg wrote: > > A lot of the tools and blocks are too hard to > > understand. "Inaccessible" might be the proper > > term. This might apply to, for example, SSL, > > and more so to IPSec. These have a lower survival > > rate,

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Peter Gutmann
Ian Grigg <[EMAIL PROTECTED]> writes: >Also, a lot of cryptosystems are put together by committees. SSH was >originally put together by one guy. He did the lot. Allegedly, a fairly >grotty protocol with a number of weakneses, but it was there and up and >running. And SSH-2 is apparantly nice,

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Eric Murray
On Mon, Jun 02, 2003 at 10:09:06AM -0400, Ian Grigg wrote: > A lot of the tools and blocks are too hard to > understand. "Inaccessible" might be the proper > term. This might apply to, for example, SSL, > and more so to IPSec. These have a lower survival > rate, simply because as developers look

Patriot Act humor

2003-06-03 Thread Steve Schear
Attorney General John Ashcroft is visiting an elementary school. After the typical civics presentation to the class, he announces, "All right boys and girls, you can ask me questions now." A young boy named Bobby raises his hand and says, I have three questions, Mr. Ashcroft: 1. How did Bush win th

Re: The Streisand imagecriminal lives 2-3 parcels away from me

2003-06-03 Thread Harmon Seaver
On Sun, Jun 01, 2003 at 07:13:28PM -0700, Tim May wrote: > > His address in the phone book is unlisted, but he gave his home address > in one or more of his ventures, and so up it popped in a Google search > on his name: 1365 Meadowridge Rd., the road just before mine (Allan > Lane) off of B

Re: Maybe It's Snake Oil All the Way Down

2003-06-03 Thread Ian Grigg
A lot of the tools and blocks are too hard to understand. "Inaccessible" might be the proper term. This might apply to, for example, SSL, and more so to IPSec. These have a lower survival rate, simply because as developers look at them, their eyes glaze over and they move on. I heard one guy sa