RE: SSL vs. VPN

I'm saying VPN is not inherently more secure than SSL - it depends on
your implementation (cipher chosen/key length/key exchange method etc).
The statement I take issue with (and just responded to Larry about) is
that SSL session handshaking is flawed and that some random hacker could
decrypt a session merely by listening in at the start.


TrailBlazer Systems, Inc.
http://www.as400ftp.com
AS/400 Communications & E-Commerce Solutions

Chaos, panic and disorder...my work here is done.


> -----Original Message-----
> From: Chris Bipes [SMTP:chris.bipes@cross-check.com]
> Sent: Thursday, November 16, 2000 10:12 AM
> To:   'MIDRANGE-L@midrange.com'
> Subject:      RE: SSL vs. VPN
> 
> Tim what are you saying?  VPN is not more secure than SSL?  Or SSL is
> not to
> a peculiar service?  We use a 256bit VPN while SSL is now up to
> 128bit.
> Some SSL is only 64bit or worse yet, 56bit.
> 
> Christopher K. Bipes  mailto:ChrisB@Cross-Check.com
> Sr. Programmer/Analyst        mailto:Chris_Bipes@Yahoo.com
> CrossCheck, Inc.      http://www.cross-check.com
> 6119 State Farm Drive Phone: 707 586-0551 x 1102
> Rohnert Park CA  94928        Fax: 707 586-1884
> 
> If consistency is the hobgoblin of little minds, only geniuses work
> here.
> Karen Herbelin - Readers Digest 3/2000
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---