3 ms·
(1) Calling their security/cryptography "military grade" should be a warning signal. (2) SSL/TLS isn't inferior, it's the wrong tool for the job. Using the wro
by janzer 17y ago
(1) Calling their security/cryptography "military grade" should be a warning signal.
(2) SSL/TLS isn't inferior, it's the wrong tool for the job. Using the wrong tool in encryption almost always means opening up unnecessary attacks.
(3) When the competitor has such obvious holes and not only do they have them but are trumpeting them as their strong security; I think it makes a lot of sense to point out how bad it is.
- tptacek 17y agoSSL/TLS is exactly the right tool for securing data in transit. That Zumodrive lacks the security feature of encrypting the data clientside before transmitting it under cover of TLS is not relevant to the argument. In a client/server protocol, there are all sorts of things besides your data that you need secured: metadata, command & control, identification. You need an encrypted transport. TLS is the right answer for that problem regardless of what you're doing with the underlying data.