Am 18.08.2008 um 23:34 schrieb Eric Rescorla:

(2) What protocol it's embodied in.

Well, what I don't understand: We already have ESessions. Why do we need another protocol now? ESessions offers nearly everything you can think of. It offers public keys, but you can also use secrets instead of public/private keys. It offers SAS, but also fingerprints. It allows a variety of algorithms etc.

IMO, it offers all we need. All that's missing is a cryptanalysis for it.

--
Jonathan

Attachment: PGP.sig
Description: This is a digitally signed message part

Reply via email to