Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:15:22
Perry E. Metzger (perry@piermont.com)
Tue, 27 Oct 1998 08:33:32 -0500
Bill Frantz writes:
> >My suggestion: why re-implement what is already available in the
> >program? The java applet is allowed to open an https: URL on the
> >server if it wishes. Have it do so, and download your session keys
> >that way.
> >
> >I've built several systems already that use this trick. 'taint pu'rty,
> >but it does the job.
>
> Perry - How is the HTTPS session key selected.
The randomness for it is derived using whatever method the browser
normally uses for selecting the thing. It is true that you are
dependent on the browser, but I suspect it is easier to get good
randomness in C than in Java. The code for Netscape's RNG is fairly
public, too.
Perry
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:15:22