Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:57
David Jablon (dpj@world.std.com)
Sun, 09 Aug 1998 23:24:41 -0400
>At 05:13 PM 8/7/98 -0400, David P Jablon wrote:
>> PK seems more valuable for protecting PIN verification over
>> the network, from ATM<-->bank, etc. Solutions here include
>> both cert-based solutions and PIN-authenticated PK exchange.
At 09:42 PM 8/7/98 -0700, Alex Alten wrote:
> I disagree with this, but not for security reasons. PK is
> just too slow for this. The Visa interchange gateways can
> hit 2000 security transactions per second (key setup +
> enciphering/deciphering). DES is already slow, especially
> key setup, using PK would grind everything to a halt. This
> is one of the main technical reasons why SET has failed to
> deploy successfully.
Bah. Sometimes I hate realistic arguments.
I don't doubt the validity of your explanation about why things
are the way they are, but in this context it seems the
barriers to strong cryptography are as much psychological
as technical.
Large institutional stinginess is not a good excuse.
My bank wants to charge a $1-2 fee for foreign ATM
transactions. If their costs are really of this magnitude,
I'd expect them to splurge, and spend the extra $0.02
to provide the best possible crypto.
-- dpj
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:57