Army signals security & "Clansmen" series radios

[Owen Blacker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'd say it depends on the butchness of the server (for want of a
better term  :o)

For example, on client sites, we frequently put the whole checkout
process (or whatever) into SSL, so that less net-savvy users get the
little padlock icon whilst filling in the form, not just on
submission.  It doesn't have a noticeable effect on CPU load on even
relatively heavy use sites.


O x
- -----
Owen Blacker
Senior Internet Developer and InfoSec Consultant, pres.co
!!!  New PGP keys -- see http://www.owens-place.org.uk/pgp.html  !!!
Sig  0x00036874 | d39f b776 fa20 c125 b0e2  aa6d 555e 4126 0003 6874

> -----Original Message-----
> From: David Howe [mailto:DHowe@Hawkswing.demon.co.uk]
> Sent: Thursday, September 07, 2000 4:25 PM
> To: ukcrypto@maillist.ox.ac.uk
> Subject: Re: Army signals security & "Clansmen" series radios
> 
> 
> > Hmm. OpenSSL can do around 55 2048 bit public key 
> operations per second
> > on my not-so-fast P2, so "ages" is, in fact, around 3 minutes.
> > That doesn't strike me as a serious problem.
> Bandwidth may be more of a factor than processor speed - and in
> fact, apparently the CPU load of SSL is a major factor in web site
> design - keeping as much of the transaction on the HTTP side of the
> wire as possible
> and only "going secure" at checkout to take credit card 
> details and process
> the order.  This came up on BugTraq only today, while discussing
> Basic Authentication over SSL.
> 
> 
> 
> 
> ____________________________________________________________________
> _ This message has been checked for all known viruses by UUNET 
> delivered 
> through the MessageLabs Virus Control Centre. For further 
> information visit
> http://www.uk.uu.net/products/security/virus/
> 

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
Comment: Due to RIP, pls check for revocation before using this key!

iQA/AwUBObfAnVVeQSYAA2h0EQLr4wCeOZOWTmEumeU9GoYmz7CLQR/p8i4AnRWZ
CbRSxGpREkMKTq+TLZSfRKl8
=XR6I
-----END PGP SIGNATURE-----

_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered 
through the MessageLabs Virus Control Centre. For further information visit
http://www.uk.uu.net/products/security/virus/