3 ms·

When you stop passive attacks, then attackers will just step up their game to active attacks. If you want to call something secure, you need to design a threat

When you stop passive attacks, then attackers will just step up their game to active attacks. If you want to call something secure, you need to design a threat model that doesn't involve an attacker with one arm tied behind their back. That doesn't serve anyone's interests, except maybe the blackhats'.

mehrdada 11y ago
> When you stop passive attacks, then attackers will just step up their game to active attacks. Not always. It often changes the economics of the game. Especially when facing mass surveillance, considering the potential risk of detectability. Just because some attackers can step up their game for some targets, it does not imply they will do the same for all targets. > If you want to call something secure... I don't disagree with your point of view about what can or cannot be called "secure". One can debate that definition. However, stopping passive attackers is often NOT useless and it does add value. Security is not a binary proposition.
- sarciszewski 11y ago
  Sure, but consider this: Do you know what stops all passive attackers and most active attackers? TLS. Do you know what WebCrypto adds that TLS doesn't? Nothing. That's why this is useless. Just use TLS correctly and you're better off. Now, reframe this as "desktop application that uses libsodium in a protocol designed by cryptography engineer" and suddenly my interest is piqued.
  - mehrdada 11y ago
    > Do you know what WebCrypto adds that TLS doesn't? Nothing. No, consider this: an end-to-end encrypted messaging web page delivered over TLS that stores keys in browser local storage. A passive attacker that can see the incoming traffic on the server but does not want to alter the JavaScript sent to the clients will never see the messages. I argue this is weak but not useless. (I would argue all TLS encryption in the browser is, in a sense, opportunistic to a certain extent, since very rarely people look at the address bar, effectively making it unauthenticated.)

mehrdada 11y ago

> When you stop passive attacks, then attackers will just step up their game to active attacks. Not always. It often changes the economics of the game. Especially when facing mass surveillance, considering the potential risk of detectability. Just because some attackers can step up their game for some targets, it does not imply they will do the same for all targets. > If you want to call something secure... I don't disagree with your point of view about what can or cannot be called "secure". One can debate that definition. However, stopping passive attackers is often NOT useless and it does add value. Security is not a binary proposition.

sarciszewski 11y ago
Sure, but consider this: Do you know what stops all passive attackers and most active attackers? TLS. Do you know what WebCrypto adds that TLS doesn't? Nothing. That's why this is useless. Just use TLS correctly and you're better off. Now, reframe this as "desktop application that uses libsodium in a protocol designed by cryptography engineer" and suddenly my interest is piqued.
- mehrdada 11y ago
  > Do you know what WebCrypto adds that TLS doesn't? Nothing. No, consider this: an end-to-end encrypted messaging web page delivered over TLS that stores keys in browser local storage. A passive attacker that can see the incoming traffic on the server but does not want to alter the JavaScript sent to the clients will never see the messages. I argue this is weak but not useless. (I would argue all TLS encryption in the browser is, in a sense, opportunistic to a certain extent, since very rarely people look at the address bar, effectively making it unauthenticated.)