> Uhmm, I curious: why do you want to encrypt the public
> key?


Thanks for your reply.  The reason is because the application
is not suitable for certificates, but we will use password
checking to authenticate.  Will use a system where the password
itself is never sent, naturally.  Need to make sure we are
not subject to man-in-the middle attack.  Since the password
has to be depended on anyway, we will use it to encrypt the
public key.  That should take care of man in the middle,
right?

-C

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to