[7148] in www-talk@info.cern.ch

home help back first fref pref prev next nref lref last post

Re: No More Passwords In The Clear in HTTP!

daemon@ATHENA.MIT.EDU (John Franks)
Tue Jan 10 00:18:21 1995

Date: Tue, 10 Jan 1995 05:50:38 +0100
Errors-To: listmaster@www0.cern.ch
Reply-To: john@math.nwu.edu
From: john@math.nwu.edu (John Franks)
To: Multiple recipients of list <www-talk@www0.cern.ch>

In article <199501100038.QAA02915@neon.mcom.com> you write:
>
>This proposal utilizes RSA MD5 encryption.  If you have this 
>capability, why not go all the way to SSL (or SHTTP)?  It would
>make much more sense.
>

I would very much like to put SSL in the WN server unfortunately it
requires a license from RSA.  There is no way to pay them money
and still make a free server.  

This problem does not occur with MD5.  Here is an excerpt from the
copyright notice:

    License to copy and use this software is granted provided that it
    is identified as the "RSA Data Security, Inc. MD5 Message-Digest
    Algorithm" in all material mentioning or referencing this software
    or this function.

    License is also granted to make and use derivative works provided
    that such works are identified as "derived from the RSA Data
    Security, Inc. MD5 Message-Digest Algorithm" in all material
    mentioning or referencing the derived work.



-- 

John Franks 	Dept of Math. Northwestern University
		john@math.nwu.edu


home help back first fref pref prev next nref lref last post