3 ms·
I think the point is much often closer to "open is a prerequisite to security".
by feanaro 8y ago
I think the point is much often closer to "open is a prerequisite to security".
- kelnos 8y agoIt's more like "open is a prerequisite for personal verification of security". A system can be closed and secure, just you can't verify it.
- feanaro 8y agoYes, but I tend to view security as a somewhat epistemological phenomenon. It's not enough for the security to exist "somewhere out there in the universe" in an absolute, objective sense. If you have no way of verifying it, it could simply be a lie, and is thus useless for threat modelling.