10 ms·
OP is biased, in a sense that there is no such thing as “X is better than Y, because test proves that”. And it’s not regulator’s responsibility to decide whethe
by nalekberov 6y ago
OP is biased, in a sense that there is no such thing as “X is better than Y, because test proves that”. And it’s not regulator’s responsibility to decide whether X better than Y, there are rules, list of approved algorithms and whatnot. It’s that simple. If one can violate the rules, virtually everyone can violate the rules. Whether X is better than Y that thing can be debated of course.
- WarOnPrivacy 6y agoThis seems to blow past the issue where rules are creating the precise problem (increased vulnerability), that they were expected to minimize.
- nalekberov 6y agoThen the right action would be to fight for including bcrypt in the approved algorithms list.
- WarOnPrivacy 6y ago> right action If a fight is required, 'energy-draining', 'needless' or 'counterproductive' would be more appropriate adjectives than 'right'.