[Full-disclosure] JaPCrypt

[Valdis.Kletnieks at vt.edu]

On Wed, 06 Feb 2008 03:59:30 PST, coderman said:

> since psk without key distribution nor secure secret exchange does not
> solve the problems that HTTPS solves, to say this is useful in
> situations where HTTPS is not available is disingenuous.

Sure. So you e-mail the shared secret in a PGP or S/MIME encrypted mail.

So saying that it doesn't work because there's no secure secret exchange
is disingenuous as well.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20080206/97517cb3/attachment.bin