[242] in WWW Security List Archive
Re: info on proposed SSL protocol and Netscape implementation
daemon@ATHENA.MIT.EDU (Mary Ellen Zurko)
Mon Nov 28 15:04:25 1994
From: zurko@osf.org (Mary Ellen Zurko)
To: www-security@ns1.rutgers.edu
Date: Mon, 28 Nov 94 12:13:59 EST
Cc: zurko@osf.org (Me), hallam@dxal18.cern.ch
Reply-To: zurko@osf.org (Mary Ellen Zurko)
> I don't think that people should get completely wound up about the different
> security schemes. At present we have:
>
> 1) PGP
> 2) PEM
> 3) Kerberos
> 4) S-HTTP/SHEN
> 5) Secure Sockets.
> 6) (IP-NG to arrive ???)
> 7) (X-509 to be implemented ???)
Don't forget
8) DCE
Its authentication and communication protection are Kerberos-based,
but DCE also provides ACLs for authorization. We're prototyping it
today, and will have code available next year.
Our approach is similar to SSL's, in that the security occurs at the
transport layer.
Mez