[13815] in cryptography@c2.net mail archive
RE: SSL
daemon@ATHENA.MIT.EDU (Whyte, William)
Thu Jul 10 15:34:37 2003
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: "Whyte, William" <WWhyte@ntru.com>
To: "'iang@systemics.com'" <iang@systemics.com>,
Jill.Ramonsky@Aculab.com
Cc: cryptography@metzdowd.com
Date: Thu, 10 Jul 2003 14:08:24 -0400
[ Jill ]
> > Instead, I have a
> > different question: Where can I learn about SSL?
[ Ian ]
> PS: next step is Ferguson & Schneier's recent book
> which has been described as "how to re-invent SSL."
This reminds me: the best tutorial on the security
aspects of SSL 3.0 that I know of is the Counterpane
analysis paper, avaiable from:
http://www.counterpane.com/ssl.html
Read it to get a good idea of why certain decisions were
made, and why they help. It doesn't tell you how to use
OpenSSL, but it's great to let you know what's going on
under the bonnet.
(I kindof feel like the new Ferguson & Schneier book would
have been better if it had simply been this paper expanded
to book length...)
Cheers,
William
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
