Re: HTTP vs HTTPS (was Re: [DotGNU]Ignoring C#)

[Barry Fitzgerald]

Norbert Bollow wrote:
> 
> I think that HTTP is better than HTTPS for DotGNU because we
> will often transfer large amounts of data that don't need
> excryption (such as Portable Executables of publicly-released
> software).
> 
> So I think it is best to build on an entirely untrusted
> communication channel (implemented with HTTP or an extension
> of HTTP) and decide for every item of data whether it needs
> encryption or a digital signature or both.
> 
> Greetings, Norbert.
> 

Sounds good to me :)

encapsulating a privately encrypted packet would be more flexible in any
circumstance - it could give the user control over how they want their
data encrypted.

        -Barry