On 21 Nov 2005, at 21:58, Alessandro Manotti wrote:

On 11/21/05, David Bovill <[EMAIL PROTECTED]> wrote:

The SSL libraries that RunRev uses should be able to do this - and I
would have thought considerably faster than a native and possibly
less secure Transcript implementation - no?

What do you mean when you talk about "less secure"?

Minor point - to do with trusting the code. Standard open libraries are trusted - what is to say that the Transcript code generating the SHA-1 hash has not been subtly altered? What is the best way to ensure this does not happen? An SHA-3 hash of the SHA-1 code :)

If RunRev player implements sha-1, then in transcript one can manage
certificates, etc... but without sha-1 algorithm....

Yes it would be cool - not really sure if in the case of SSL it is better for the trust reasons hinted at above to keep the standard open external or integrate into the engine proprietary code.
_______________________________________________
use-revolution mailing list
[email protected]
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution

Reply via email to