Re: MASS Security Review document

> > > > > "John" == John Levine <johnl(_at_)iecc(_dot_)com> writes:

    >> draft-housley-mass-sec-review-00.txt

    John> Most of it's pretty good, but section 4.1 on replay attacks is
    John> just wrong.  It misunderstands what signatures do.

I've just reread it.  I think everything in section 4.1 is correct and
accurate.

You may not know how to solve the problem; you may know that you
cannot solve the problem.  However it is a real problem and it will
have the effects described in Russ's draft.

--Sam