Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* AngelWarrior wrote on Wed, May 20, 2009 at 15:18 -0500: > "I dont need to know with whom I am contacting but after > contact my messages should be private." If you sent your message to just anybody, how can it be private? oki, Steffen --[ End of message ]--

Re: On the fly certificate generation to send to the client

2009-05-25 Thread Steffen DETTMER
* Scott Gifford wrote on Wed, May 20, 2009 at 21:52 -0400: > AngelWarrior writes: > > > but this still requires a CA kind of certificate right.I dont > > know if the client will be have a CA certificate to > > authenticate it.If I am wrong please explain me how it can be > > done. > > Regular SS

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior wrote: > but this still requires a CA kind of certificate right. > I dont know if the client will be have a CA certificate > to authenticate it.If I am wrong please explain me how > it can be done. The usual solution (as used on secure web pages, for credit card orders, and so on) i

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Scott Gifford
AngelWarrior writes: > but this still requires a CA kind of certificate right.I dont know if the > client will be have a CA certificate to authenticate it.If I am wrong please > explain me how it can be done. Regular SSL only requires a certificate on the server. Encrypted Web browsing with htt

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior wrote: > Thank you for replying. > I am thinking of this design.Is this feasible.My design approach > is mainly based on > "I dont need to know with whom I am contacting but after contact > my messages should be private." I don't think this is a coherent approach unless you layer som

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Victor Duchovni
On Wed, May 20, 2009 at 03:18:34PM -0500, AngelWarrior wrote: > Thank you for replying. > I am thinking of this design.Is this feasible.My design approach is mainly > based on > "I dont need to know with whom I am contacting but after contact my messages > should be private." For pseudonymous sec

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
Thank you for replying. I am thinking of this design.Is this feasible.My design approach is mainly based on "I dont need to know with whom I am contacting but after contact my messages should be private." client(My own application) Server (My own application) 1.(client)create a normal socket and

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
> AngelWarrior writes: > > > but this still requires a CA kind of certificate right. > > I dont know if the client will be have a CA certificate > > to authenticate it.If I am wrong please explain me how > > it can be done. > > The server must have or know something that an attacker does not > ha

RE: On the fly certificate generation to send to the client

2009-05-20 Thread David Schwartz
AngelWarrior writes: > but this still requires a CA kind of certificate right. > I dont know if the client will be have a CA certificate > to authenticate it.If I am wrong please explain me how > it can be done. The server must have or know something that an attacker does not have or know. Othe

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
but this still requires a CA kind of certificate right.I dont know if the client will be have a CA certificate to authenticate it.If I am wrong please explain me how it can be done. On Wed, May 20, 2009 at 2:47 PM, Scott Gifford wrote: > AngelWarrior writes: > > > I need some Info.I have a clien

Re: On the fly certificate generation to send to the client

2009-05-20 Thread AngelWarrior
forgot to say at step 7 and 8 agreed upon encryption algorithm On Wed, May 20, 2009 at 3:18 PM, AngelWarrior wrote: > Thank you for replying. > I am thinking of this design.Is this feasible.My design approach is mainly > based on > "I dont need to know with whom I am contacting but after contact

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Scott Gifford
AngelWarrior writes: > I need some Info.I have a client and server application which > requires a secure medium for the transferring of data between each > other. Currently I am using openssl to achieve this using private > and public key certificates with RSA encryption. I don't want to > ship t

Re: On the fly certificate generation to send to the client

2009-05-20 Thread Victor Duchovni
On Wed, May 20, 2009 at 02:37:58PM -0500, AngelWarrior wrote: > I need some Info.I have a client and server application which requires a > secure medium for the transferring of data between each other. Currently I > am using openssl to achieve this using private and public key certificates > with