Re: [9fans] spam rejection after reception does have limits

["boyd, rounin" <boyd@insultant.net>]

> Between you and Choate, you're getting irritating: "You don't
> understand..."  Maybe you can explain, if you're so fucking clever!

you need a root CA or some other CA you trust.  this depends on
the DNS, which can be spoofed, hence possiblty giving you a false
public key.

key revocation never worked.

TLS/SSL is so complex that the bugs kept turning up.  someone at the
labs even had a theoretical [impractical, but possible] an attack on it.

that's why we don't use 2DES, 'cos there is theoretical attack where
you meet in the the middle.  sure, it's costly, but the solution is to go
to 3DES.  DES 'died' back in the early '90s (unless you were the NSA,
where it probably died well before that).

once you had encrypted the 'crack' dictionary [~50k 'words'] with all
the 4096 salts busting a password file with a shell script and took
seconds.  generating the dictionary back then took a month.

i did this once, as an experiment and to test internal security.

on that point i'm NDA'd on any further discussion.

# 248 622