RE: Compression (was RE: COMPLEXITY BIG ISSUE)

My experience is that compression of data before encryption is a commonly
supported option of security packages.  I see no need to separately address
compression in our work efforts.

Cheers,
       Bob

-----Original Message-----
From: Solinsky, Jason [mailto:[email protected]]
Sent: Saturday, March 11, 2000 4:09 PM
To: 'David RR Webber'; David Burdett
Cc: Ebxml; 'Dick Brooks'; ebXML Architecture (E-mail)
Subject: RE: Compression (was RE: COMPLEXITY BIG ISSUE)


> Can we further agree that compression is a red-herring!!!

We are planning (as I understand it) to create standards for the use of
encryption and authentication. Encryption and authentication by their very
nature need to be performed at a lower level than compression. I therefore
ask why security is our concern but not compression (which can significantly
improve security by removing redundancy prior to encryption).

JWS