3 ms·
Name a security standard written by some one other than DJB that doesn't recommend bad defaults. It's almost as tho a three letter agency with more money than s
by dangerface 7y ago
Name a security standard written by some one other than DJB that doesn't recommend bad defaults. It's almost as tho a three letter agency with more money than sense is just paying people to write weak standards.
Just because the security idea can and is done poorly doesn't mean that the idea is inherently insecure. We need to see security as an ongoing process not a one time fire and forget thing.
Security like encryption always gets weaker it doesn't get stronger. It's a bad idea to dismiss JWT or similar because the standard has gotten weaker as our understanding gets better.
- CiPHPerCoder 7y ago> Name a security standard written by some one other than DJB that doesn't recommend bad defaults. Sure, here's one at random: https://github.com/awslabs/aws-encryption-sdk-specification https://github.com/awslabs/aws-encryption-sdk-specification DJB is not one of the authors of that specification. ;)
- skrebbel 7y agoObviously you're too humble to plug your own efforts, but isn't "sensible defaults" the whole point of PASETO as well?