From owner-freebsd-security  Mon Sep 25  3:48:52 2000
Delivered-To: freebsd-security@freebsd.org
Received: from ux1.ibb.net (ibb0005.ibb.uu.nl [131.211.124.5])
	by hub.freebsd.org (Postfix) with ESMTP id 118A137B422
	for <freebsd-security@FreeBSD.ORG>; Mon, 25 Sep 2000 03:48:49 -0700 (PDT)
Received: from localhost (mipam@localhost)
	by ux1.ibb.net (8.9.3/8.9.3/UX1TT) with SMTP id MAA11211;
	Mon, 25 Sep 2000 12:48:05 +0200
Date: Mon, 25 Sep 2000 12:48:05 +0200 (MET DST)
From: Mipam <mipam@ibb.net>
To: Scot Elliott <scot@london.sparza.com>
Cc: CrazZzy Slash <slash@krsu.edu.kg>,
	Ali Alaoui El Hassani <961BE653994@stud.alakhawayn.ma>,
	freebsd-security@FreeBSD.ORG, Peter Pentchev <roam@orbitel.bg>
Subject: Re: Encryption over IP
In-Reply-To: <Pine.GSO.4.21.0009251124180.7006-100000@hagop.london.sparza.com>
Message-ID: <Pine.LNX.3.95.1000925124744.11069C-100000@ux1.ibb.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> No - only the RSA server key is changed periodically.  The session key
> (passed from client to server using public key crypto at the start) is not
> changed throughout the session... which can last much longer than the
> server key regeneration time.

Okay, good point :)

Mipam.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message