[114293] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Dutch Transport Card Broken

daemon@ATHENA.MIT.EDU (James A. Donald)
Wed Jan 30 11:48:31 2008

Date: Wed, 30 Jan 2008 15:18:56 +1000
From: "James A. Donald" <jamesd@echeque.com>
To: Richard Salz <rsalz@us.ibm.com>
CC: Cryptography <cryptography@metzdowd.com>
In-Reply-To: <OFB2B0CB84.7CD69BF0-ON852573E0.0015EDBF-852573E0.001647CF@us.ibm.com>

James A. Donald:
 >> SSL is layered on top of TCP, and then one layers
 >> one's actual protocol on top of SSL, with the result
 >> that a transaction involves a painfully large number
 >> of round trips.

Richard Salz wrote:
 > Perhaps theoretically painful, but in practice this is
 > not the case; commerce on the web is the
 > counter-example.

The delay is often humanly perceptible.  If humanly
perceptible, too much.

 > The benefits of layering for outweigh the perceived
 > gains of just merging it all together into one glob.
 > For example, the ability to replace layers, or replace
 > them by just dropping in a new library.

Compilation would provide the same benefits, and a fair
bit more - such as built in protocol negotiation, rather
than protocol negotiation being reinvented ad hoc in a
different and incompatible way each, and bolted on after
the fact in a different way each time.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post