• To: Paul Prescod <paul@p...>
• Subject: Re: ANN: Building Web Services the REST Way
• From: Rich Salz <rsalz@d...>
• Date: Sun, 7 Jul 2002 21:31:57 -0400 (EDT)
• Cc: <xml-dev@l...>
• In-reply-to: <3D23A75A.60BAB4D5@p...>

> If I have the information, encrypt it, and you decrypt
> it then how can anyone know, when those bits show up somewhere on
> Gnutella, who exposed it?

With public-key crypto, it is at least possible to audit things and 
"prove" that one party wasn't the discloser.  Particularly, in a 
multi-party transaction, the intermediaries aren't suspect.  With SSL, 
each end MUST share the session key, so intermediaries are suspect.

BTW, since a number of followons have said that URL's are opaque, it would 
seem that a URL can be partially encrypted and fit into the REST 
architecture.

	/r$

• Follow-Ups:
  • Re: ANN: Building Web Services the REST Way
    • From: "Thomas B. Passin" <tpassin@c...>

• References:
  • Re: ANN: Building Web Services the REST Way
    • From: Paul Prescod <paul@p...>

• Prev by Date: VLDB-EEXTT Call for Participation and Program
• Next by Date: Re: ANN: Building Web Services the REST Way
• Previous by thread: Re: Building Web Services the REST Way
• Next by thread: Re: ANN: Building Web Services the REST Way
• Index(es):
  • Date
  • Thread