Re: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread Steven M. Bellovin
On Sun, 05 Mar 2006 12:35:23 -0500 "William L. Anderson" <[EMAIL PROTECTED]> wrote: > Today's NYTimes has an article about "piggybacking" on open wireless > networks and what some people think about it and what some are doing > about it. The link is: > http://www.nytimes.com/2006/03/05/technology/

RE: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread Wachdorf, Daniel R
I think it's important to understand the difference between encryption and security (or being secure). Encryption is a tool, being secure is a state. Think of encryption as a lock on a door. Putting a lock on a door doesn't necessarily make your house any more secure. If you leave your window

RE: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread ljknews
At 6:04 AM -0800 3/6/06, Jeremy Epstein wrote: > Encryption is one way to secure the *transport* on the network (subject to > various caveats about appropriate use of crypto, trust issues, etc.). I'd > strongly disagree with anyone who says that encryption "makes a network > secure" - because peo

RE: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread Jeremy Epstein
From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of ljknews > Sent: Monday, March 06, 2006 8:00 AM > To: Secure Coding Mailing List > Subject: Re: [SC-L] Question about the terms "encypt" and "secure" > > At 12:35 PM -0500 3/5/06, William L. An

RE: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread Gary McGraw
This is a very good question and is worth a careful answer. For most "off the shelf" users and press people, "securing" and "encrypting traffic on" do amount to the same thing when it comes to wireless networks. In this case, the encryption they turn on is hopefully WPA and not WEP. Early versio

Re: [SC-L] Question about the terms "encypt" and "secure"

2006-03-06 Thread ljknews
At 12:35 PM -0500 3/5/06, William L. Anderson wrote: > My question is whether it's more accurate to say "secure their network" > rather than "encrypt". I'm not clear myself about the meaning of these > terms; I think of encryption as being one way to make a network secure. Another way that was de