3 ms·
There's a gap in the way we talk about security in the industry it seems. On one hand, we have the tools to build cryptographically secure information systems,
by nixpulvis 7y ago
There's a gap in the way we talk about security in the industry it seems.
On one hand, we have the tools to build cryptographically secure information systems, and on the other hand there's features that simply make most users more secure.
For example, as mentioned in the article, Gmail will allow you to send an email where the recipient can't forward it. Practically this may help protect against careless adversaries, but a motivated user can obviously copy and paste somehow.
Cryptography tends to rely on computationally hard problems, meanwhile this kind of security seems to rely on problems that are seen as cumbersome or impractical from a UX perspective.
The problem I have is masquerading "UX security" (for lack of a better term) as cryptographic security.