From owner-freebsd-hackers  Wed Dec 10 19:26:21 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id TAA25073
          for hackers-outgoing; Wed, 10 Dec 1997 19:26:21 -0800 (PST)
          (envelope-from owner-freebsd-hackers)
Received: from anlsun.ebr.anlw.anl.gov (anlsun.ebr.anlw.anl.gov [141.221.1.2])
          by hub.freebsd.org (8.8.7/8.8.7) with SMTP id TAA25060
          for <hackers@FreeBSD.ORG>; Wed, 10 Dec 1997 19:26:10 -0800 (PST)
          (envelope-from cmott@srv.net)
Received: from darkstar.home (ras630.srv.net [205.180.127.130]) by anlsun.ebr.anlw.anl.gov (8.6.11/8.6.11) with SMTP id UAA16297 for <hackers@FreeBSD.ORG>; Wed, 10 Dec 1997 20:26:07 -0700
Date: Wed, 10 Dec 1997 20:25:32 -0700 (MST)
From: Charles Mott <cmott@srv.net>
X-Sender: cmott@darkstar.home
To: hackers <hackers@FreeBSD.ORG>
Subject: Re: FW: Why so many steps to build new kernel?
In-Reply-To: <Pine.BSF.3.95.971210190407.1361F-100000@alive.znep.com>
Message-ID: <Pine.BSF.3.96.971210201353.26388A-100000@darkstar.home>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > I certainly wouldn't want anything like kernel configs or sysadmin
> > type stuff happening over a standard port like 80 or 8080 with
> > clear text passwords.  If I could use SSL on some bizzaro
> > port number, that would be really worth having.  :-)
> 
> SSL is troublesome because the fascist US gov't patents basic math and is
> afraid that allowing people to export technology that the whole world
> already has will be a security risk. 
> 
> The sad truth is that the Internet would be far more secure if the US
> gov't wasn't so obtuse.

My understanding is that only commercial web servers support SSL, which I
am guessing is the name for standard secure link used by MSIE and
Netscape.  Is it possible that Apache supports SSL?? 

In a more perfect world, we would be using source code available browsers
that had evolved to use a free, ssh derivative encryption.  Instead we let
Netscape and Microsoft take over the market and set standards.  It may be
impossible to ever go back. 

Still, I think there is a chance for ssh to conquer the world.  The
F-secure products based on it are apparently becoming very popular.

Charles Mott