[147363] in cryptography@c2.net mail archive
Re: [Cryptography] PRISM-Proofing and PRISM-Hardening
daemon@ATHENA.MIT.EDU (Bill Frantz)
Mon Sep 30 20:37:10 2013
X-Original-To: cryptography@metzdowd.com
Date: Mon, 30 Sep 2013 15:45:28 -0700
From: Bill Frantz <frantz@pwpconsult.com>
To: "Salz, Rich" <rsalz@akamai.com>
In-Reply-To: <2A0EFB9C05D0164E98F19BB0AF3708C711D6DEB350@USMBX1.msg.corp.akamai.com>
Cc: cryptography@metzdowd.com
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com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