8 ms·
No, what I'm saying is that this title is completely alarmist, because the OpenSSL vulnerability that has been discovered is not vulnerable to attack past the d
by teilo 17y ago
No, what I'm saying is that this title is completely alarmist, because the OpenSSL vulnerability that has been discovered is not vulnerable to attack past the data center from which it originates. The phrase "busts public key crypto" is completely misleading.
- tptacek 17y agoIt busts public key crypto --- in one of its most popular implementations in both closed and open products, using a class of attacks which has devastated many other implementations --- in settings where power is under the control of attackers, which isn't even a remotely uncommon situation. You think you're debunking a story, but really what you're doing is making it sound like the only exposure you have to cryptography comes from Schneier's blog.