3 ms·
"What really amazes me is folks who complain about SHA1 being insecure, without even having an understanding of how preimage attacks work. Either explain to us
by keyme 6y ago
"What really amazes me is folks who complain about SHA1 being insecure, without even having an understanding of how preimage attacks work.
Either explain to us the attack vector against actual SHA1 certificates that could result in wide-spread faking of certificates, or withdraw your claim.
Your explanation needs to also explain how this attack could cicumvent the various defense-in-depth official and unofficial checks (certificate transparency, certificate revocation lists, limited time validity)."
I hope we can at least agree that this is not the way to argue about security protocols at least when it comes to crypto.
- vkou 6y agoThe difference between SHA1 and voting is that expert consensus is that SHA1 sucks, and that expert consensus is that systemic mail-in voter fraud has not taken place. Either be an expert on the subject, or defer to expert consensus, or provide clear evidence for why the experts are all wrong. You've done none of these. I can't believe that in 2020, I have to assert, on a technical forum, that people making technical statements about security should either know what they are talking about, or provide evidence to back up what they are saying.