Re: [Full-disclosure] JaPCrypt

From: coderman <coderman@xxxxxxxxx>
Date: Wed, 6 Feb 2008 03:59:30 -0800

On Feb 6, 2008 3:21 AM, Gerardo Di Giacomo <gerardo@xxxxxxxx> wrote:

...
The PSK is never sent, neither by the client neither by the server.

apologies, i will be more clear:

since psk without key distribution nor secure secret exchange does not
solve the problems that HTTPS solves, to say this is useful in
situations where HTTPS is not available is disingenuous.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] JaPCrypt
  - From: Valdis . Kletnieks

References:
- Re: [Full-disclosure] JaPCrypt
  - From: Gerardo Di Giacomo

Prev by Date: Re: [Full-disclosure] JaPCrypt
Next by Date: Re: [Full-disclosure] What makes Yahoo! a good merger candidate?
Previous by thread: Re: [Full-disclosure] JaPCrypt
Next by thread: Re: [Full-disclosure] JaPCrypt
Index(es):
- Date
- Thread

Relevant Pages

PPOE und IPSec ?
... RPC over HTTPS, OWA über HTTPS, PPTP Active Sync ... nur VPN L2TP mit PSK nicht. ... das es Probleme mit IPSEc und PPoe gibt? ... Next by Date: ...
(microsoft.public.de.german.isaserver)
Re: PPOE und IPSec ?
... RPC over HTTPS, OWA über HTTPS, PPTP Active Sync ... nur VPN L2TP mit PSK nicht. ... das es Probleme mit IPSEc und PPoe gibt? ... Am W2K3 RRAS brauchst Du nix einstellen. ...
(microsoft.public.de.german.isaserver)