[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Krypto mit Nachschluessel



X-No-Archive:yes


On Sat, 19 Jul 97 18:28:59 +0200, ms@dream.hb.north.de (Martin Schroeder)
wrote:
Am Sat, 19 Jul 97 18:28:59 +0200 schrieb Martin Schroeder:

>Glaubt ernsthaft jemand, da"s die NSA einen Gerichtsbeschlu"s braucht,
>um den Nachschl"ussel zu bekommen?
>
>Wer schreibt einen Leserbrief und weist darauf hin, da"s Daten, die mit
>dieser Technik "ubermittelt werden, von der NSA an US-Firmen weitergereicht
>werden? (Arbeitspl"atze!!)

Kann es sein, daß Netscape sowieso ziemlich eng mit der NSA
zusammenarbeitet ?
Was ist zum Beispiel eigentlich von FORTEZZA zu halten ?
Aus der Netscape Seite:
>Netscape is now offering client and server products with FORTEZZA,
>hardware-enhanced security services originally developed by the U.S. government.
>Netscape's offerings include Netscape Navigator 3.01 with FORTEZZA, 
>Netscape Enterprise Server 2.01 with FORTEZZA, and Netscape Proxy Server 2.0 
>with FORTEZZA - each of which provides a unique web-based solution by integrating 
>FORTEZZA security features in a commercially available, off-the-shelf package. 
>
>Netscape's products work with the FORTEZZA Crypto Card, a hardware-based 
>security token, to provide cryptographic services such as data confidentiality, user 
>authentication, and data integrity. Support for FORTEZZA has been added to the 
>Secure Sockets Layer (SSL) protocol, which provides a straightforward way to add 
>encryption features to existing applications and network infrastructures. SSL is 
>application protocol independent and provides the following benefits: 
>
>•encryption capabilities for client and server communication that restrict unwanted 
>access to the network 
>
>•authentication that uses certificates and digital signatures to verify the identity of 
>parties in information exchanges and transactions 
>
>•data integrity that allows the receiver of data to check that it has not been modified 
>in transit 
>
>Netscape products with FORTEZZA support the use of FORTEZZA with SSL 
>as an enhanced alternative to software-based cryptographic mechanisms. 
>
>The FORTEZZA Crypto Card is a major component of the MISSI program, a 
>network security initiative led by the National Security Agency in partnership 
>with industry and standards organizations. MISSI's goal is to distribute an 
>evolving set of solutions that provide secure interoperability in a network 
>security framework based on common security standards and protocols. 
>
Aus der Summary-Seite von MISSILAB:
>MISSI develops standards, protocols and interfaces that define a cohesive 
>security architecture for an evolving set of security solutions. 
>The logical extension of NSA's MISSI efforts is a future where NSA continues
>to work cooperatively with industry and users to develop and field secure and 
>interoperable COTS software for the rapidly approaching multimedia
>environment. In support of the DoD and its supporting agencies, MISSI provides 
>evolutionary and affordable security solutions for meeting the security needs of 
>a wide variety of current and emerging information systems activities.  
Nähere Infos zum MISSI Programm unter http://beta.missilab.com/
Also ich habe Probleme damit, einem Produkt zu vertrauen und einzusetzen,
dessen Sicherheitskomponenten in Zukunft immer mehr Code entahlten wird,
der das Produkt eines NSA - Programmes ist.
Aber in Zukunft wird es wohl auch kaum noch etwas anderes geben.

Ciao
Kai 
+------------------------------------------------------------>>
|Homepage: http://www.hkn.de/user/raven/
|PGP-Key on request/over www.hkn.de/user/raven/
|raven.asc[RSA]ravendh.asc[D-H]
|Key-Server ID: 0xE6F6BA89 [RSA]/0x34DC8451 [D-H]
|Anti Big Brother Page www.hkn.de/user/raven/bigbroth.html
|Resist against control & censorship * Fight for a free matrix