At 9/17/99 10:56 PM , Wirt Atmar wrote:
<snip>
>Is
>the security level required necessary that it be (i) merely capable of
>confusing the fairly intense college hacker for a period of weeks, or (ii) is
>the intent foiling the National Security Agency?

Choice (i) is my preference, and would make the software exportable.

>Secondly, should the encryption extend to only very sensitive items, such as
>passwords, or should all transmitted material between the HP3000 and QCTerm
>be encrypted? Any form of encryption is going to slow the data transfer down.
>Recognizing that, it would be possible to apply encryption asymmetrically, so
>that keyboarded material, typed by a user, is transmitted in the clear
>(excluding passwords, of course), but so that all text returned by the HP3000
>(which is the massive side of the transmission) is encrypted.

My preference would be for the first option, where all material transmitted
from source to target (in either direction) is encrypted.  I realize that
there would be problems with the one or two character input, but there are
many times I have to answer security questions regarding whether all
input/output from/to the HP 3000 via terminal emulation is encrypted.
Being able to say "yes" would certainly help a LOT!.
<snip>
>Comments?
>Wirt Atmar

John
--------------------------------------------------------------
John Korb                            email: [log in to unmask]
Innovative Software Solutions, Inc.

The thoughts, comments, and opinions expressed herein are mine
and do not reflect those of my employer(s), or anyone else.