I too am interested in this subject. perhaps I do not want encryption 
but I do want authenticated information through SSL.  Is it possable to 
have only the key passed via encryption. Then only useing hash methods 
to hash the key + data transmitted and send the data unencrypted but 
give it an authentication that it is not spoofed? This could be usefull 
if the data was already encrypted or I just want to make sure I am 
getting valad data from a source without encryption overhead.

Jacobson Erik P Civ AFRL/IFGC wrote:

>The easiest way would be to move HTTP from port 80 to your HTTPS port.  SSL
>without encryption wouldn't be SSL.  Unless you just want the key
>authentication and leave the data unencrypted?
>
> >-----Original Message-----
> >From: Denslow, Gregory E (Greg) [mailto:[EMAIL PROTECTED]]
> >Sent: Friday, August 16, 2002 12:11 PM
> >To: [EMAIL PROTECTED]
> >Subject: Does SSL have "No encryption" option?
> >
> >
> >Had an internal request to provide https connectivity 
> >"without encryption".
> >Is this a valid option? Will OpenSSL allow the negotiation of 
> >this if client
> >or server requests it?
>______________________________________________________________________
>OpenSSL Project                                 http://www.openssl.org
>User Support Mailing List                    [EMAIL PROTECTED]
>Automated List Manager                           [EMAIL PROTECTED]
>


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to