Re: Has any public CA ever had their certificate revoked?

2009-05-06 Thread Peter Gutmann
Paul Hoffman writes: >Peter, you really need more detents on the knob for your hyperbole setting. >"nothing happened" is flat-out wrong: the CA fixed the problem and researched >all related problems that it could find. Perhaps you meant "the CA was not >punished": that would be correct in this ca

Re: CSPRNG algorithms

2009-05-06 Thread Peter Gutmann
Travis writes: >I have never seen a good catalog of computationally-strong pseudo-random >number generators. It seems that everyone tries to roll their own in >whatever application they are using, and I bet there's a lot of waste and >inefficiency and re-inventing the wheel involved. > >If this

Re: Solving password problems one at a time, Re: The password-reset paradox

2009-05-06 Thread Peter Gutmann
Ben Laurie writes: >Incidentally, the reason we don't use EKE (and many other useful schemes) is >not because they don't solve our problems, its because the rights holders >won't let us use them. That's not the reason, TLS-SRP isn't that annoyingly encumbered, and even the totally unencumbered

Re: Has any public CA ever had their certificate revoked?

2009-05-06 Thread Paul Hoffman
At 1:02 AM +1200 5/7/09, Peter Gutmann wrote: >Paul Hoffman writes: > >>Peter, you really need more detents on the knob for your hyperbole setting. >>"nothing happened" is flat-out wrong: the CA fixed the problem and researched >>all related problems that it could find. Perhaps you meant "the CA w

Re: SHA-1 collisions now at 2^{52}?

2009-05-06 Thread Peter Gutmann
"Perry E. Metzger" writes: >Home routers and other equipment last for years. If we slowly roll out >various protocol and system updates now, then in a number of years, when we >find ourselves with real trouble, a lot of them will already be updated >because new ones won't have issues. I'm not re