[security] more timing

[Alaric Dailey]

Yet another argument for encrypting EVERYTHING between the end points, as
well as using something verifiable for keys, rather than just something
self-signed like PGP or SSH.
 
http://www.download.com/Spyware-Horror-Stories/1200-2023-5159875.html
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-security/attachments/20061027/92bfc401/attachment-0002.htm>