RE: Digest mess
Josh Cohen (joshco@microsoft.com)
Tue, 16 Dec 1997 00:07:57 -0800
Cant you run SSL on TLS in "null cipher" mode,
where you just do authentication, not encryption ?
I know you can do this with ssl, Im imagining
that you can do it in TLS as well..
Any SSL experts?
> -----Original Message-----
> From: Larry Masinter [SMTP:masinter@parc.xerox.com]
> Sent: Tuesday, December 16, 1997 12:04 AM
> To: Roy T. Fielding
> Cc: HTTP Working Group
> Subject: Re: Digest mess
>
> > The current definition seems to have lost
> > all of the advantages it had over transport-level encryption,
>
> Except that it doesn't require encryption.
>
> This is critically important. Don't go off half-cocked.
>
> Larry
> --
> http://www.parc.xerox.com/masinter