[114298] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

RE: Dutch Transport Card Broken

daemon@ATHENA.MIT.EDU (Jim Cheesman)
Wed Jan 30 12:16:08 2008

From: "Jim Cheesman" <jcheesman@grupoburke.com>
To: "'James A. Donald'" <jamesd@echeque.com>,
        "'Richard Salz'" <rsalz@us.ibm.com>
Cc: "'Cryptography'" <cryptography@metzdowd.com>
Date: Wed, 30 Jan 2008 18:00:45 +0100
In-Reply-To: <47A008C0.5040503@echeque.com>


James A. Donald:
> >> SSL is layered on top of TCP, and then one layers
> >> one's actual protocol on top of SSL, with the result
> >> that a transaction involves a painfully large number
> >> of round trips.

Richard Salz wrote:
 > Perhaps theoretically painful, but in practice this is
 > not the case; commerce on the web is the
 > counter-example.

James A. Donald:

> The delay is often humanly perceptible.  If humanly
> perceptible, too much.

I respectfully disagree - I'd argue that a short wait is actually more
reassuring to the average user (Hey! The System's checking me out!) than an
instantaneous connection would be.

Adding in a false wait (a nice pop-up, a progress bar and a snake-oily
security message) would be even better...

Regards,
Jim Cheesman




---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post