Re: Servers that just want to have TLS

Douglas Song <[email protected]> Fri, 9 May 1997 16:00:25 -0400 (EDT)
Newsgroups gmane.ietf.apps-tls
Message-ID <[email protected]>
On Fri, 9 May 1997, David P. Kemp wrote:

> I'm afraid I suffer from that misconception.  Could you post references
> to a protocol that defeats mitm attacks without authenticating either
> endpoint?

diffie-hellman with the interlock protocol. this is used, for instance, in
the stel (secure telnet) package from CERT-Italy.

---
Dug Song <[email protected]>
University of Michigan ITD Systems Research Programmer
http://www-personal.umich.edu/~dugsong