[17905] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: the limits of crypto and authentication

daemon@ATHENA.MIT.EDU (Rich Salz)
Fri Jul 15 13:33:12 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Thu, 14 Jul 2005 23:13:21 -0400 (EDT)
From: Rich Salz <rsalz@datapower.com>
To: Anne & Lynn Wheeler <lynn@garlic.com>
Cc: Aram Perez <aramperez@mac.com>,
	"cryptography@metzdowd.com" <cryptography@metzdowd.com>
In-Reply-To: <42D69C41.1000506@garlic.com>

> If you had two products ... both effectively performing the same
> function, one you already had deployed, which was significantly cheaper,
> significantly simpler, and significantly faster, which one would you choose?

I was told that one of the reasons SSL took off was because Visa and/or MC
told merchants they would "for the time being" treat SSL as card-present,
in terms of fraud penalties, etc.  If this is true (anyone here verify?
My source is on the list if s/he wants to name themselves), then SSL/SET
is an interesting example of betting on both sides.
	/r$
-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post