RE: aid worker stego

2005-03-29 Thread Ben Nagy
My response is totally off topic, but this stinks. This is exactly why workers from reputable aid agencies operate under pre-agreed legal status agreements with the country concerned. These agreements cover, among other things, telecommunications infrastructure and legal immunities. Aid agencies t

RE: SSL/TLS passive sniffing

2004-12-01 Thread Ben Nagy
OK, Ian and I are, rightly or wrongly, on the same page here. Obviously my choice of the word certificate has caused confusion. [David Wagner] > This sounds very confused. Certs are public. How would > knowing a copy > of the server cert help me to decrypt SSL traffic that I have > intercepted

SSL/TLS passive sniffing

2004-11-30 Thread Ben Nagy
Hi all, I'm a bumbling crypto enthusiast as a sideline to my other, real, areas of security expertise. Recently a discussion came up on firewall-wizards about passively sniffing SSL traffic by a third party, using a copy of the server cert (for, eg, IDS purposes). There was some question about wh