Received: (from majordom@localhost) by hyperreal.org (8.8.5/8.8.5) id HAA26835; Mon, 11 Aug 1997 07:27:38 -0700 (PDT) Received: from sierra.zyzzyva.com (ppp0-sierra.zyzzyva.com [208.214.59.46]) by hyperreal.org (8.8.5/8.8.5) with ESMTP id HAA26825 for ; Mon, 11 Aug 1997 07:27:32 -0700 (PDT) Received: from sierra (localhost [127.0.0.1]) by sierra.zyzzyva.com (8.8.5/8.8.2) with ESMTP id JAA14918 for ; Mon, 11 Aug 1997 09:27:36 -0500 (CDT) Message-Id: <199708111427.JAA14918@sierra.zyzzyva.com> X-Mailer: exmh version 2.0zeta 7/24/97 To: new-httpd@apache.org Subject: Re: frontpage 98 server extensions In-reply-to: marcs's message of Mon, 11 Aug 1997 00:19:07 -0600. X-uri: http://www.zyzzyva.com/ Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 11 Aug 1997 09:27:36 -0500 From: Randy Terbush Sender: new-httpd-owner@apache.org Precedence: bulk Reply-To: new-httpd@apache.org > > They now add a key written to disk, presumably to authenticate > that the server is actually the one talking to the setuid program. I'm > not qualified to comment on the cryptographic validity of their > code except to say I don't like the looks of it. Interesting. That method was discussed and implemented here long ago by RST and Ben at least to a test level if I remember correctly.