Full Disclosure mailing list archives

Re: New paper on Security and Obscurity


From: stephane nasdrovisky <stephane.nasdrovisky () paradigmo com>
Date: Wed, 01 Sep 2004 15:25:46 +0200

This not so new info may bring some lights : http://www.fact-index.com/a/au/auguste_kerckhoffs.html : "... the security of a cryptosystem must depend only on the key, not on the secrecy of any other part of the system."

Peter Swire wrote:

“full disclosure” and computer security:

        http://papers.ssrn.com/sol3/papers.cfm?abstract_id=531782

        The paper begins by analyzing the
cliché that “there is no security through obscurity.”  It observes that the
traditional military and intelligence cliché is that “loose lips sink
ships.”

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: