Dear Mr. Casad,

UnixReview published Anne Carasik' article on openssl recently.
It should be great for LEGO fan or someone studying history of alcohol.
However, this article (at least) give wrong advise and show
lack of writer competence. To illustrate it:

- using "-rand /dev/urandom" while RSA key generation will try to read
the whole device in and would never stop. One just cant generate
RSA keypair with this option

- DSA is listed as digest algorithm in Ref.2

- it was said that "DSA uses Diffie-Hellman for key exchange" under
"Public Key Generation and Tools"

- it was suggested to use GnuPG for public-key operations instead of
openssl suitable for illustration only. However, author didnt bother
to show howto sign X.509 certificates and Secure Electronic Transactions
messages with GnuPG.

I'm sure errors list could grow fast and easy. What is UnixReview
policy on publishing follow-ups?

----- Forwarded message from Brian Hatch <[EMAIL PROTECTED]> -----

Date: Wed, 26 Jun 2002 14:00:59 -0700
From: Brian Hatch <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: OpenSSL article at unixreview


There's an intro OpenSSL article at www.unixreview.com that
folks might want to peruse.

----- End forwarded message -----

--
Naina library: http://www.unity.net/~vf/naina_r1.tgz
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to