[7148] in www-talk@info.cern.ch
Re: No More Passwords In The Clear in HTTP!
daemon@ATHENA.MIT.EDU (John Franks)
Tue Jan 10 00:18:21 1995
Date: Tue, 10 Jan 1995 05:50:38 +0100
Errors-To: listmaster@www0.cern.ch
Reply-To: john@math.nwu.edu
From: john@math.nwu.edu (John Franks)
To: Multiple recipients of list <www-talk@www0.cern.ch>
In article <199501100038.QAA02915@neon.mcom.com> you write:
>
>This proposal utilizes RSA MD5 encryption. If you have this
>capability, why not go all the way to SSL (or SHTTP)? It would
>make much more sense.
>
I would very much like to put SSL in the WN server unfortunately it
requires a license from RSA. There is no way to pay them money
and still make a free server.
This problem does not occur with MD5. Here is an excerpt from the
copyright notice:
License to copy and use this software is granted provided that it
is identified as the "RSA Data Security, Inc. MD5 Message-Digest
Algorithm" in all material mentioning or referencing this software
or this function.
License is also granted to make and use derivative works provided
that such works are identified as "derived from the RSA Data
Security, Inc. MD5 Message-Digest Algorithm" in all material
mentioning or referencing the derived work.
--
John Franks Dept of Math. Northwestern University
john@math.nwu.edu