5 ms·
Frankly I don't do security critical things on TLS anymore. I'm tired of having to wait in limbo for months to fix known vulnerabilities.
by microcolonel 11y ago
Frankly I don't do security critical things on TLS anymore. I'm tired of having to wait in limbo for months to fix known vulnerabilities.
- _yy 11y agoOther protocols are probably just as broken, we just haven't found the vulnerabilities yet. Few protocols (if any) get as much scrutiny as SSL/TLS.
- wolf550e 11y agoWhat do you use instead? SSH? IPSec?
- sandworm101 11y agoGo to datacenter. Open cage. Plug in keyboard. Oldschool.
- Someone1234 11y agoAre you shielding the keyboard from EM leakage? I don't open a cage, I get in one and do my work in there... No more EM eavesdropping.
- sandworm101 11y agoUnless there is an enemy antenna with you inside the cage. A real security pro uses a pneumatic keyboard.
- IgorPartola 11y agoNo magnetized needle and a steady hand?
- deleted 11y ago[deleted]
- chflags 11y agoThis seems like what a sensible person would do. On the other hand, placing evergreen confidence in "TLS", believing that it is "good enough" or concluding "it's all we've got" are lines of thinking that not make sense to me. The vulnerabilities just keep coming, one after another. High speed crypto not part of TLS that, as another commenter put it, is "considered safe". Does it exist? Useful software that is written from the start with such care that it does not need to be continously patched ad inifitum. Nonexistant? (No need to answer. I know the truth.) Getting something added to TLS seems difficult enough, but getting something removed seems impossible. Like all bad software, TLS has numerous "features" I do not need and will never use. OpenSSL is like a museum of cryptography, preserving the obsolete for posterity. Long live TLS. May it forever waste my time and energy.