3 ms·
https://projectbullrun.org/dual-ec/ext-rand.html https://projectbullrun.org/dual-ec/ext-rand.html contains more information about the TLS Extended Random propos
by hyper_reality 6y ago
https://projectbullrun.org/dual-ec/ext-rand.html https://projectbullrun.org/dual-ec/ext-rand.html contains more information about the TLS Extended Random proposal and how it relates to the backdoored Dual EC DRBG.
Also Eric Rescorla, the other author of the Extended Random draft, is now the CTO of Firefox? He's one of the foremost experts on TLS, it'd be interesting to examine his role in this.
- rurban 6y agoRescorla's role is described here https://blog.cryptographyengineering.com/2017/12/19/the-strange-story-of-extended-random/ https://blog.cryptographyengineering.com/2017/12/19/the-stra... and here https://sockpuppet.org/blog/2015/08/04/is-extended-random-malicious/ https://sockpuppet.org/blog/2015/08/04/is-extended-random-ma... I would only worry about Amazon here. Like deleting your account.