3 ms·
Happy to see discussion of the age design. I replied on the age-dev mailing list. https://groups.google.com/d/msgid/age-dev/505e74e5-1385-4055-9a8f-bd41cd20a40
by FiloSottile 7y ago
Happy to see discussion of the age design. I replied on the age-dev mailing list.
https://groups.google.com/d/msgid/age-dev/505e74e5-1385-4055-9a8f-bd41cd20a409%40www.fastmail.com https://groups.google.com/d/msgid/age-dev/505e74e5-1385-4055...
tl;dr: we seem to disagree on what users should want from age—confidentiality or also authentication—and that would lead not only to different design choices, but to drastically different UXs.
- Terretta 7y agoI had a diff tl;dr: > ”Unfortunately, the age spec doesn’t document its threat model or the security goals it is intended to achieve ... Most importantly, the spec should define its security goals.”