Re: [twsocket] Poor man's SSL/TLS?

2008-09-12 Thread Francois PIETTE
Yes. It would make most sense to use OpenSSL for most applications. I thought about the other direction only because in one of my applications there is a download size restraint and the OpenSSL libraries are fairly large. Given the sizes of the DLLs, I can imagine there is a huge amount of

Re: [twsocket] Poor man's SSL/TLS?

2008-09-11 Thread Arno Garrels
that encourage people to use the OpenSSL library. I hope those who worked on ICS-SSL could shed some light... Beside the huge effort it would take to implement the SSL from scratch, do you realy believe that any home-grown solution, written by non-experts in cryptography could be more secure

Re: [twsocket] Poor man's SSL/TLS?

2008-09-11 Thread Francois PIETTE
-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be - Original Message - From: Arno Garrels [EMAIL PROTECTED] To: ICS support mailing twsocket@elists.org Sent: Thursday, September 11, 2008 11:52 AM Subject: Re: [twsocket] Poor man's SSL

Re: [twsocket] Poor man's SSL/TLS?

2008-09-11 Thread jlist
of the freeware Internet Component Suite (ICS) http://www.overbyte.be - Original Message - From: Arno Garrels [EMAIL PROTECTED] To: ICS support mailing twsocket@elists.org Sent: Thursday, September 11, 2008 11:52 AM Subject: Re: [twsocket] Poor man's SSL/TLS? that encourage people to use

[twsocket] Poor man's SSL/TLS?

2008-09-10 Thread jlist
I was reading TLS's wikipedia page the other day. I find that although it's a lot of work, it is probably not too bad to write the SSL handshake and encryption from scratch, say, with ICS. I must be seriously overlooking the details and complexities. I wonder what are the potential issues of