full-disclosure - HTTP AUTH BASIC monowall

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri Mar 17 15:43:53 2006
From: tim-security at sentinelchicken.org (Tim)
Subject: HTTP AUTH BASIC monowall

Hi,

> Don't get me wrong, there's obvious value in the certificate system.  
> Because I waxed philosophical about webs of trust doesn't mean I want to 
> throw the baby out with the bathwater.  :)

Heh, ok, we're on the same page then.  I was referring to the PGP web of
trust, since I'm not familiar with the marketing of the SSL one.  Indeed
you are right that people associate the wrong kind of trust with even
what the SSL PKI provides, and we agree that what it does provide is
fragile.

cheers,
tim