[111266] in cryptography@c2.net mail archive
Re: crypto class design
daemon@ATHENA.MIT.EDU (Arshad Noor)
Thu Dec 20 14:23:42 2007
Date: Wed, 19 Dec 2007 21:38:26 -0800
From: Arshad Noor <arshad.noor@strongauth.com>
To: "Ian Farquhar (ifarquha)" <ifarquha@cisco.com>
CC: cryptography@metzdowd.com
In-Reply-To: <AAADD16A25EB4B44B7E8B3FB8626FAEB0360AAD5@xmb-hkg-414.apac.cisco.com>
I think you would be doing the crypto community a huge public
service by publishing the ~4 page section, Ian. Personally,
I prefer your 3-sentence disclaimer. :-)
Arshad Noor
StrongAuth, Inc.
Ian Farquhar (ifarquha) wrote:
I personally have a boilerplate risk disclosure section
> which basically says "your in-house app developers know squat about
> crypto, and you're at risk if you're trusting their designs and
> implementation as a consequence." It's a bit nicer phrased, but that's
> the gist of the ~4 page section.
>
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
