[IP] more on A Model for when Disclosure Helps Security: What Is Different About Computer and Network Security?

[David Farber <dave@farber.net>]

Begin forwarded message:

From: David Byrden <David@Byrden.com>
Date: September 9, 2004 4:22:14 AM EDT
To: dave@farber.net
Subject: Re: [IP] A Model for when Disclosure Helps Security: What Is 
Different About Computer and Network Security?


Dave:

The article referred by Monty Solomon states that
"disclosure cannot both help and hurt security".

But the implicit assumption that 'disclosure' would cover
every last detail, is an unhelpful oversimplification.

Proponents of disclosure do not recommend disclosing
*everything* - as an obvious example, they do not want to
disclose the secrets which the security system is meant
to protect. As a more pertinent example, it is often recommended
to disclose the algorithm of an encryption system, but *not*
the keys that are used for a particular session.

						David

-------------------------------------
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/