4 ms·
The EFF score card is an embarrassment which is essentially equivalent to one of those "comparison table of our competitors" on a SaaS website. That's a good an
by tprynn 11y ago
The EFF score card is an embarrassment which is essentially equivalent to one of those "comparison table of our competitors" on a SaaS website. That's a good analogy for it, because it uses the same questionable metrics and even more questionable ranking system that one of those tables would use. The score card gives Signal the same ranking as Cryptocat - that's an instant negative result for its usefulness.
- redthrow 11y ago> Signal the same ranking as Cryptocat You are probably right that getting a high score on the scorecard doesn't guarantee a secure program. (The standard of the socrecard is not high.) But can't you still argue that getting a low score on the scorecard would probably mean it's not a secure app?
- dijit 11y agoEFF scorecard isn't meant to measure "how secure" an app is, it's supposed to measure how secure and free the application could potentially be. Having key's held by the creator is a sure way to undermine any security model, having externally auditable code is a measure to ensure people can independently verify if code is secure or not (or if it's taking a carbon copy for it's creators) etc;