3 ms·

I'm not talking about code bugs and backdoors, which can always exist. I'm talking about protocols, encryption schemes and architectures. We need "comprehensibl

I'm not talking about code bugs and backdoors, which can always exist. I'm talking about protocols, encryption schemes and architectures. We need "comprehensible security", as opposed to incomprehensible, "NP-hard" and (soon) even "quantum-hard" security, accessible to only 0.1% of engineers, let alone users. We still don't have digital signing technology that is verifiable as easily as paper signature and works peer-to peer, without some big corp/govt involved.

khedoros1 10y ago
The challenge here is that it's super-easy to design protocols that the average person would consider 100% secure, even after reading some documentation. It's the same problem where anyone can create a lock/encryption that they don't know how to break, but there's always someone smarter or better versed in breaking it. Subtle bugs don't look like problems until someone figures out an exploit against them.