3 ms·
I am sure audits could help Age either way. :) I am just saying that it is still fresh as opposed to GnuPG. This is what people typically call "battle-tested",
by johnisgood 5y ago
I am sure audits could help Age either way. :) I am just saying that it is still fresh as opposed to GnuPG. This is what people typically call "battle-tested", when the software has been used by a zillion of people for some time. Of course I cannot speak about Age much, this is the first time I heard about it.
- tptacek 5y agoGnuPG had been battle tested for almost two decades before Efail was discovered and disclosed.
- johnisgood 5y agoYeah, but does this help Age?
- tptacek 5y agoOnly to the extent that it shows you can't simply compare the vintage of two systems and declare the older one safer by dint of battle-testing.
- johnisgood 5y agoI am not saying it is safer because it is older, but it sure has been under more scrutiny than Age. That said, Age might be safer regardless.
- akerl_ 5y agoCan you describe the upside of this “more scrutiny”, since per the above it doesn’t seem to have made the codebase safer?