RE: Is this list still active?

Hi Damian,

There are two separate ideas from the book in your statement. The first is
that readers thought that crypto was some sort of magic dust that would
cure all security problems taken without a context. His stance turned to 
"Security is a process, not a product." (From the forward).

The second idea was from page 385 where he suggests that you can insure 
digital security risks like any other risk.

           cheers, bob


On Mon, 29 Nov 2004, Wiest, Damian wrote:
> In "Secrets and Lies", Bruce Schneier states (in the forward?) that he's
> changed his views on dealing with computer security issues after having seen
> many people create insecure systems using his "Applied Cryptography" tome.
> I don't have the book in front of me, but he says something to the effect
> that we may be forced to deal with the issue through the use of
> underwriters, as other industries have done.