[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Do people have something against RSA?



ccwilliams@ntlworld.com said:
> However, let's say that I implemented a standard, say TLS, and only
> included the mandatory cipher suite, DSA with ephemeral
> Diffie-Hellman, SHA-1 and 3-DES encryption.  You know what?  It
> wouldn't work with anything!  Everybody else's implementation uses RSA
> so mine has to as well, whether I like it or not. 

Is seems to me that your reasonoing is flawed in that you assume that
"everone else" will *not* include the *mandatory* cipher suite.
The whole idea of having mandatory cipher suites in the first place
is to assure at least one common fall back algorithm.

Best regards,
//Mats