Re: [stunnel-users] Three patches

Jason Haar wrote:

IMHO I think you're over-engineering this. If that is the enemy you *have to* design against, then you shouldn't be using SSL - you should get yourselves a bunch of cryptologists and invent your own proprietary alternative like DRM products do - security-through-obscurity is probably your best friend... However if the bad guys have your equipment, then they can reverse engineer that too.

In my humble opinion as a cryptologist (http://ehash.iaik.tugraz.at/wiki/StreamHash) and a penetration tester (http://www.linkedin.com/in/mtrojnar) security-through-obscurity is your worst enemy. It is also *my* best friend, since I make a living by breaking proprietary cryptographic protocols. 8-)

Mike