> delegating cryptography to non-cryptographers Well, ok, but who is a cryptographer then? How can a non-cryptographer tell who it's safe to delegate cryptogr

> delegating cryptography to non-cryptographers Well, ok, but who is a cryptographer then? How can a non-cryptographer tell who it's safe to delegate cryptography to? You can't even really complete a degree in cryptography (you can do a CS degree with a specialization in cryptography, but that doesn't mean all that much). There's no meaningful regulatory standards body there - the CISSP is a joke and is focused on producing compliance reports anyway rather than much to do with cryptography.