Tim wrote: >> it seems to me that encryption necessarily involves, >> or requires, authentication. > > Generically, no... It just means the traffic is encrypted, whatever it > is. e.g. I can look at bugzilla using a HTTPS connection, but I haven't > logged in, so it doesn't know who I am. That's encryption without > authentication. > > But if you, then, authenticate in some way through that encrypted > connection, you get both. i.e. You log on. Yes, I was being silly - I was thinking, there is no point in encrypting data if you tell everyone how to decrypt it. But I suppose there is a point to that - namely, ensuring that the data is kosher.
