4 ms·
Maybe reword that phrasing a bit then to make it mean what you want? As a server operator I will always be worried about zero days, regardless of what my cms i
by barkingcat 10y ago
Maybe reword that phrasing a bit then to make it mean what you want?
As a server operator I will always be worried about zero days, regardless of what my cms is or who wrote the software. The person who stops worrying about it is the one who will get hacked.
Maybe you mean "stop waiting for vendors to patch zero days?" And even then, once a zero-day hits, someone's going to have to write that patch, and if it's in a base library like openSSL it can be non-trivial, and you're going to have to wait regardless of what CMS you choose.
Either way, the wording needs to be refined.
- CiPHPerCoder 10y agoI added a footnote to clarify the intent. The point of short statements like that is to encourage further scrutiny from skeptical security folks. Our previous attempts just led to people nodding along and saying "Sounds great!" https://paragonie.com/blog/2016/05/keyggdrasil-continuum-cryptography-powering-cms-airship https://paragonie.com/blog/2016/05/keyggdrasil-continuum-cry...