Re: [DotGNU]Encryption protocols

[Stephen Compall]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 11 March 2003 06:02 pm, Norbert Bollow wrote:
> We can use TLS for the connection to the Jabber server.

As, presumably, traffic is already encrypted for the ultimate recipient, 
is it really necessary to encrypt traffic between the Jabber server and 
either end of the connection? There are only two useful outcomes of 
this, the way I see it:

1. password is encrypted. So why encrypt the entire session?

2. recipient is encrypted; people sniffing the Jabber connection can't 
see to whom the data is addressed. But they can over a direct TLS 
connection anyway, which is the other alternative (and will surely 
happen).

- -- 
Stephen Compall - Also known as S11001001
DotGNU `Contributor' -- http://dotgnu.org
Jabber ID: address@hidden

"Control over the use of one's ideas" really constitutes control over
other people's lives; and it is usually used to make their lives more
difficult.
        -- RMS, "GNU Manifesto"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+c6H82AceYinZ4EgRAixSAJ9mAKBkSDMGyP2en+8V0M4aaRMLpACdEH4R
LEDtoHEN++8O1uHJ2xy6uew=
=iSR7
-----END PGP SIGNATURE-----