3 ms·
No, sites would be better off spending that extra effort on non-cryptographic security like protecting their DNS registration, internal spearphishing, etc.
by mkj 10y ago
No, sites would be better off spending that extra effort on non-cryptographic security like protecting their DNS registration, internal spearphishing, etc.
- bradknowles 10y agoIMO, full cryptographic security should be the baseline. Yes, you need the other things too, but until you've got full current cryptographic security, you're simply not done in that area.
- mkj 10y agoWhat's an example of something they could add that would make A+ harder to get, and also add meaningful security?
- bradknowles 10y agoIMO, full cryptographic security should be the baseline. Yes, you need the other things too, but until you've got full current cryptographic security, you're simply not done in that area.