[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Krypto mit Nachschluessel
- To: debate@fitug.de
- Subject: Re: Krypto mit Nachschluessel
- From: raven@hkn.de (Kai Raven)
- Date: Sat, 19 Jul 1997 21:08:11 GMT
- Comment: This message comes from the debate mailing list.
- Sender: owner-debate@fitug.de
X-No-Archive:yes
On Sat, 19 Jul 97 18:28:59 +0200, ms@dream.hb.north.de (Martin Schroeder)
wrote:
Am Sat, 19 Jul 97 18:28:59 +0200 schrieb Martin Schroeder:
>Glaubt ernsthaft jemand, da"s die NSA einen Gerichtsbeschlu"s braucht,
>um den Nachschl"ussel zu bekommen?
>
>Wer schreibt einen Leserbrief und weist darauf hin, da"s Daten, die mit
>dieser Technik "ubermittelt werden, von der NSA an US-Firmen weitergereicht
>werden? (Arbeitspl"atze!!)
Kann es sein, daß Netscape sowieso ziemlich eng mit der NSA
zusammenarbeitet ?
Was ist zum Beispiel eigentlich von FORTEZZA zu halten ?
Aus der Netscape Seite:
>Netscape is now offering client and server products with FORTEZZA,
>hardware-enhanced security services originally developed by the U.S. government.
>Netscape's offerings include Netscape Navigator 3.01 with FORTEZZA,
>Netscape Enterprise Server 2.01 with FORTEZZA, and Netscape Proxy Server 2.0
>with FORTEZZA - each of which provides a unique web-based solution by integrating
>FORTEZZA security features in a commercially available, off-the-shelf package.
>
>Netscape's products work with the FORTEZZA Crypto Card, a hardware-based
>security token, to provide cryptographic services such as data confidentiality, user
>authentication, and data integrity. Support for FORTEZZA has been added to the
>Secure Sockets Layer (SSL) protocol, which provides a straightforward way to add
>encryption features to existing applications and network infrastructures. SSL is
>application protocol independent and provides the following benefits:
>
>•encryption capabilities for client and server communication that restrict unwanted
>access to the network
>
>•authentication that uses certificates and digital signatures to verify the identity of
>parties in information exchanges and transactions
>
>•data integrity that allows the receiver of data to check that it has not been modified
>in transit
>
>Netscape products with FORTEZZA support the use of FORTEZZA with SSL
>as an enhanced alternative to software-based cryptographic mechanisms.
>
>The FORTEZZA Crypto Card is a major component of the MISSI program, a
>network security initiative led by the National Security Agency in partnership
>with industry and standards organizations. MISSI's goal is to distribute an
>evolving set of solutions that provide secure interoperability in a network
>security framework based on common security standards and protocols.
>
Aus der Summary-Seite von MISSILAB:
>MISSI develops standards, protocols and interfaces that define a cohesive
>security architecture for an evolving set of security solutions.
>The logical extension of NSA's MISSI efforts is a future where NSA continues
>to work cooperatively with industry and users to develop and field secure and
>interoperable COTS software for the rapidly approaching multimedia
>environment. In support of the DoD and its supporting agencies, MISSI provides
>evolutionary and affordable security solutions for meeting the security needs of
>a wide variety of current and emerging information systems activities.
Nähere Infos zum MISSI Programm unter http://beta.missilab.com/
Also ich habe Probleme damit, einem Produkt zu vertrauen und einzusetzen,
dessen Sicherheitskomponenten in Zukunft immer mehr Code entahlten wird,
der das Produkt eines NSA - Programmes ist.
Aber in Zukunft wird es wohl auch kaum noch etwas anderes geben.
Ciao
Kai
+------------------------------------------------------------>>
|Homepage: http://www.hkn.de/user/raven/
|PGP-Key on request/over www.hkn.de/user/raven/
|raven.asc[RSA]ravendh.asc[D-H]
|Key-Server ID: 0xE6F6BA89 [RSA]/0x34DC8451 [D-H]
|Anti Big Brother Page www.hkn.de/user/raven/bigbroth.html
|Resist against control & censorship * Fight for a free matrix