Automatic Encryption
Illtud Daniel
illtud.daniel@llgc.org.uk
Fri Feb 14 17:03:00 2003
"Joseph E. Mainusch" wrote:
> > It is _extremely_ unlikely to invent and
> > to implement something even remotely secure as openssh (which is not
> > bulletproof) in one year, as a plugin for vnc.
>
> ...which is why I would employ standard protocols for these things.
> i.e. RSA, SHA, AES. That's why they exist.
> SSH utilizes the standard protocols I've mentioned (among others). Why
> not use them as well? You don't need to pull the entire functionality of
> SSH into VNC in order to do this.
Yes, and therein lies the problem - do you know enough about
SSH or the "standard protocols" [they're algorithms] to know
which bits to pull out, and how to implement them securely?
Most encryption is broken in the implementation, not the algorithm.
--
Illtud Daniel illtud.daniel@llgc.org.uk
Uwch Ddadansoddwr Systemau Senior Systems Analyst
Llyfrgell Genedlaethol Cymru National Library of Wales
Yn siarad drosof fy hun, nid LlGC - Speaking personally, not for NLW