|
Information Security
< Previous Next >
Poppy SSL FIX Proxy
Chris Lambert / EMX Company Limited
11 Jun 2001 12:19PM ETHua Cao wrote:
> Can someone please let me know the www site/links
> for downloading the Poppy SSL FIX Proxy?
It's on the Encryption work group page:
http://www.fixprotocol.org/WORKGROUPS/960506144/poppy-0.6.4a.tar.gz
>Assuming it support SSL 3.0. True?
Yes
> Is it fair to say that if a SSL FIX Proxy is used,
> there is no need to encrypt the data using such as,
PGP/DES/MD5, again?
This depends on whether your main requirement is for confidentiality, message integrity or both.
An SSL channel should give you confidentiality (assuming good key algorithms & lengths, certificate policies etc ) - but message integrity probably requires per-message digest / signing / public-key encryption, potentially signed by the sending application rather than by the SSL Client software.
Chris
Poppy SSL FIX Proxy
Chris Lambert / EMX Company Limited 11 Jun 2001 12:19PM ET
|
