He's a great security expert. nit - I wouldn't claim that someone who _has_ written security (password, or cryptography)-related software, is necessarily _qual

He's a great security expert. nit - I wouldn't claim that someone who _has_ written security (password, or cryptography)-related software, is necessarily _qualified_ to, or a trustworthy _expert_ in the field. In security especially, self-proclaimed expertise (as the strongest sales pitch) does not distinguish between respected experts and snake oil salesman. I would say that he's written several widely read and respected cryptography books, designed widely used algorithms (standards & well-tested candidates), and write about social & technical factors that surround & affect security. Good links! Thank you!