4 ms·

Wont this just prompt NSA to crack the others if they see a spike in disabled crackables?

• kentt 11y ago
  Valid concern, but that's a bit a defeatist attitude. Yes if we all switch to more secure encryption, they will try to crack or cripple those, but to crack 1024 DH was a multi billion dollar effort (just on the cusp of what it feasible for them). If we can use something more secure, then it's out of their ability. The good part is that often we can increase the difficulty to crack something by an order of magnitude without a high cost to us.
• thephyber 11y ago
  It's any attacker's best interest to aim for the weakest link in any stack/network. Fortifying the current weakest link raises the overall security of the remaining system. Whether your threat model includes the NSA or not, disabling the weakest TLS algos is likely to increase your network security.