> The main purpose of https ... Until now, it has been widely accepted ... No one expected that ... were supposed to be completely hidden from users as well as

> The main purpose of https ... Until now, it has been widely accepted ... No one expected that ... were supposed to be completely hidden from users as well as attackers. The worrying discovery .. > To help solve this serious issue, Enigma Bridge is proud to have developed a cost-effective, ground-breaking hardware security service which is based in the cloud This is just a FUD piece trying to sell their fancy cloud-based secure hype generator. Don't let your dirty hippie sysadmins use scary "Software standard use" methods like OpenSSL for key management! > ... whether companies think about the quality of their encryption keys or let their administrators use any tool at hand – instead of using secure hardware key generators > Use of validated secure hardware for key generation is the best approach to protect against many attacks. To be fair, some method for evaluating the security weaknesses in public keys (like blacklisting the weak Debian keys) is a good thing. I just take offense at this "custom secure hardware > standard software" thing.