RE: [Algorithms] Message signature in token ring

[Charles B. <cb...@cb...>]

Yeah, but the OS layer is getting banged-on heavily, so those holes
are found, and then they have the whole patching system hooked up,
so they're getting constantly fixed.  Sounds way more secure than any
custom lib.  Of course if you want to be multi-platform, it doesn't
make sense...

At 11:54 PM 4/15/2003 -0700, Casey Muratori wrote:
>It doesn't seem to make much sense to use built-in OS encryption rather
>than a freely available or commercial 3rd party one with source, because
>
>1) You can't proof or verify code you have only in binary form,
>
>2) You can't port or ensure interoperability between platforms if you have
>to rely on the encryption native to each platform,
>
>3) Um, how many times a year do they find gaping security holes in
>Windows?  Why would we assume that an OS cryptography layer is magically
>all that great?
>
>- Casey
>
-------------------------------------------------------
Charles Bloom    cb...@cb...    http://www.cbloom.com