> Name a security standard written by some one other than DJB that doesn't recommend bad defaults. Sure, here's one at random: https://github.com/awslabs/aws-e

> Name a security standard written by some one other than DJB that doesn't recommend bad defaults. Sure, here's one at random: https://github.com/awslabs/aws-encryption-sdk-specification https://github.com/awslabs/aws-encryption-sdk-specification DJB is not one of the authors of that specification. ;)