I completely agree. The point of the original "To the Author" comment was that any Security company worth its salt will also agree. The author insinuates that certain security companies do not want to talk about weaknesses in SSL implementations, when in fact, they are dying to talk about it because they want to sell you solutions that help to overcome those weaknesses. His claim that the security companies are trying to hide something is, at least in the Entrust case, comlpetely untrue. But don't believe me, investigate for yourself.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/60/10765#10765