On 21 Nov 2005, at 21:58, Alessandro Manotti wrote:
On 11/21/05, David Bovill <[EMAIL PROTECTED]> wrote:
The SSL libraries that RunRev uses should be able to do this - and I
would have thought considerably faster than a native and possibly
less secure Transcript implementation - no?
What do you mean when you talk about "less secure"?
Minor point - to do with trusting the code. Standard open libraries
are trusted - what is to say that the Transcript code generating the
SHA-1 hash has not been subtly altered? What is the best way to
ensure this does not happen? An SHA-3 hash of the SHA-1 code :)
If RunRev player implements sha-1, then in transcript one can manage
certificates, etc... but without sha-1 algorithm....
Yes it would be cool - not really sure if in the case of SSL it is
better for the trust reasons hinted at above to keep the standard
open external or integrate into the engine proprietary code.
_______________________________________________
use-revolution mailing list
[email protected]
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution