RE: [ga] Secure DNS

[Harald Alvestrand <Harald@Alvestrand.no>]

At 05:41 18/09/2000 -0700, Roeland M.J. Meyer wrote:
>Kinda, TLS is for third-party verification of the cert. It both
>authenticates and encrypts. The downside is that it is server-centric.
>Unlike SSL, which is satisfied with a simple signature, TLS actually
>goes to the CA and checks the cert.

this is a property of the implementation, not of the protocol.
TLS *IS* SSL version 3.0 with the owner names changed and some minor tweaks 
to the list of cryptoalgorithms.

--
Harald Tveit Alvestrand, alvestrand@cisco.com
+47 41 44 29 94
Personal email: Harald@Alvestrand.no

--
This message was passed to you via the ga@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga" in the body of the message).
Archives at http://www.dnso.org/archives.html