Good point. It's the flaws in the server applications that are far easier prey than the encrypted data. Geo -----Original Message----- From: Jim Binkley [mailto:jrb@private] Sent: Thursday, February 21, 2002 8:56 AM To: Geo Subject: Re: CRIME NIPC Watch Daily Report 21 February 2002 George, What's wrong with 3-des? 112 "real" bits if I remember or something like that. Plus keep in mind, historically cracking encryption on the fly hasn't been the problem with secure channels. More like the Microsoft email/web page that you installed leading to a hacked server ... Why worry about encryption when you can attack the hosts themselves? Don't attack the VPN. attack the endpoints. If it hadn't been for the disaster that is WEP (and/or PPTP), maybe these questions would not arise :-> Jim
This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:39:03 PDT