[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SOI: identity protection and DOS



On Wed, 28 Nov 2001, Steven M. Bellovin wrote:
> >3) Uses much the same mechanism as PKI certificates, so there is no need
> >to have a different variant of the protocol (different analysis and
> >verification, different code, etc.) for them. 
> 
> 4) We don't need a key exchange protocol capable of coping with both 
> certificates and shared secrets.

I believe that's essentially the same as my #3, phrased differently.

                                                          Henry Spencer
                                                       henry@spsystems.net



References: