3 ms·

I rather think you'd generalise https as "secure", and http as "not". No mention of crypto required.

dijit 4y ago
"What makes it secure" is a common (and reasonable) question from anybody curiously minded. The answer is symmetric cryptography, and you can give a layman example of what that is. But the key word is cryptography.
actionfromafar 4y ago
secure from what, though
trotro 4y ago
And that's how you get people that think that every website starting with "https" is secure and legit, even though it's trivial for malicious sites to use TLS. Fundamental cryptographic primitives (encryption, signatures,...) don't require any advanced math to understand if you don't go into the concrete instantiations. The technical community should really try to better teach these concepts to the general public as we move further into the digital age.
plaguepilled 4y ago
I sort of agree but also sorta irrelevant? The important point is that TLS is referred to as crypto in some cases, and I believe that's what the GGP was referring to. Were I writing an expository piece, sure, I might use different language, but that's not really what my reply was about.
- JauntyHatAngle 4y ago
  Surely someone who is talking about TLS knows enough about IT to understand the context of crypto is different than cryptocurrency?
forty 4y ago
I think people need to understand what's protected. Something like "https guarantees that your are connected to the website displayed in the address bar and that no one can see the content of the communication" It's important because for example it makes it clearer why they should still check the url in the address bar (and not get phished) or that the communication with the website itself is not hidden (only the content is), etc.
- ChoGGi 4y ago
  > website displayed in the address bar I would probably start there and work your way up to https :(
serf 4y ago
>No mention of crypto required. what do you think you're teaching, then? Just general good practices? A teen can be told and taught to wear a condom without explanation of the virology and biology behind the things that it helps to avoid -- similarly Grandma can learn the importance behind https without memorizing the cypher suites; it's still an aspect of cryptography.

"What makes it secure" is a common (and reasonable) question from anybody curiously minded. The answer is symmetric cryptography, and you can give a layman example of what that is. But the key word is cryptography.

actionfromafar 4y ago

secure from what, though

trotro 4y ago

And that's how you get people that think that every website starting with "https" is secure and legit, even though it's trivial for malicious sites to use TLS. Fundamental cryptographic primitives (encryption, signatures,...) don't require any advanced math to understand if you don't go into the concrete instantiations. The technical community should really try to better teach these concepts to the general public as we move further into the digital age.

plaguepilled 4y ago

I sort of agree but also sorta irrelevant? The important point is that TLS is referred to as crypto in some cases, and I believe that's what the GGP was referring to. Were I writing an expository piece, sure, I might use different language, but that's not really what my reply was about.

JauntyHatAngle 4y ago
Surely someone who is talking about TLS knows enough about IT to understand the context of crypto is different than cryptocurrency?

forty 4y ago

I think people need to understand what's protected. Something like "https guarantees that your are connected to the website displayed in the address bar and that no one can see the content of the communication" It's important because for example it makes it clearer why they should still check the url in the address bar (and not get phished) or that the communication with the website itself is not hidden (only the content is), etc.

ChoGGi 4y ago
> website displayed in the address bar I would probably start there and work your way up to https :(

serf 4y ago

>No mention of crypto required. what do you think you're teaching, then? Just general good practices? A teen can be told and taught to wear a condom without explanation of the virology and biology behind the things that it helps to avoid -- similarly Grandma can learn the importance behind https without memorizing the cypher suites; it's still an aspect of cryptography.