[SGVLUG] Polling Web Sites

Christopher Smith x at xman.org
Wed Nov 14 21:56:58 PST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John E. Kreznar wrote:
> bb.odenthal at gmail.com writes:
> 
>> Of course, using the --no-check-certificate option does have its
>> security drawbacks.  Without it you'll have to get wget to trust the
>> certiaficate authority which can be a little cumbersome but well
>> worth the effort.  Good luck.
> 
> What's really wanted is a general procedure for converting from
> connection-based security such as SSL to message-based security such
> as PGP, without any loss of security.  It's deeply irritating that
> sites try to impose real-time communication in the first place, when
> the situation would be better served by exchange of thoughtful
> messages.  But given that they do, there's a want for converting from
> one to the other.  Slow folks like me want to be able to download a
> form and ponder it for a day or a week before filling it in and
> returning it.  Ideas?

Actually, SSL isn't really connection based. It's session based (indeed,
it is entirely possible to do SSL over UDP), and in that sense PGP is
basically the same. PGP and S/MIME have a few things specifically for
e-mail, and they are built around the notion of sessions living the life
of a message (much as most uses of SSL are tied to sessions living as
long as a TCP connection).

- --Chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHO9+qOagjPOywMBARAtM+AKCb1f7AIEViZ/cCqB3bfnYJefnF6ACgqIo8
EvgeIJGYQNY3v3MmniV0w/g=
=wRB3
-----END PGP SIGNATURE-----


More information about the SGVLUG mailing list