[Security] TLS Certificates Verification

Jonathan Schleifer js-xmpp-security at webkeks.org
Tue Aug 19 10:25:37 CDT 2008


Peter Saint-Andre <stpeter at stpeter.im> wrote:

> The estimates I received for completing a professional cryptanalysis
> for ESessions implied that it would cost the XSF $100k to $200k
> (i.e., about six weeks of effort at expected rates for such work). We
> don't have that kind of money and it would not be easy to raise that
> kind of money. And trying to get this done "for a cheap price" might
> mean that we're not getting a reliable cryptanalysis. Even getting
> this done for $50k would be a stretch financially and I'd be spending
> more time raising money than doing real work. I'm sure there are
> grants we could seek, etc., but I have not yet spent the time to
> research that in depth yet.

Have you already tried contacting the premium sponsors? Many of them
have too much money, like Google, and maybe they are interested :).

-- 
Jonathan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/security/attachments/20080819/cba7788e/attachment.pgp 


More information about the Security mailing list