3 ms·
Text of his announcement: Hi everybody, I've posted information about CurveCP at http://curvecp.org http://curvecp.org; and today's release of NaCl includes c
by jeremyw 16y ago
Text of his announcement:
Hi everybody,
I've posted information about CurveCP at http://curvecp.org http://curvecp.org; and today's
release of NaCl includes command-line curvecpclient and curvecpserver
tools. There are many reasons that this curvecpclient+curvecpserver
software isn't ready for users yet---among other things,
* the software hasn't gone through anywhere near my usual levels of
testing and security review;
* the software prioritizes simplicity over efficiency in several
ways, missing some of the speed that CurveCP can provide; and
* the software handles only CurveCP, without HTTPCurve, SMTPCurve,
etc.
---but if you're a programmer interested in CurveCP then I think this
software is a reasonable starting point for experimentation and further
development.
---D. J. Bernstein
Research Professor, Computer Science, University of Illinois at Chicago
- othermaciej 16y agoFor a moment there I thought he was talking about the other NaCl, which didn't seem like a very djb-like project.
- mukyu 16y agoIsn't the point to have this work below the application layer? We have to make a new encrypted and authenticated transport layer and also rewrite all of the application protocols? Then again, with key distribution being done with nym urls the network stack is more like a tangled ball of yarn.