> Since it's highly unlikely than an untrained developer will do all of these correctly, the authors are right Oh come on! It's not rocket science, just encryp

> Since it's highly unlikely than an untrained developer will do all of these correctly, the authors are right Oh come on! It's not rocket science, just encrypt and hmac. My point was mentioning that best practicr tip for example will help. People still use aes-ecb because they don't know failing with aes-cbc is better. > When you need to roll your own crypto (custom transports, RSA combos for compatibility reasons) you'll just have to get an expert to do that If someone is in a position where they're choosing ciphers and they're not an expert, chances are they won't get funds to hire an expert and they can't tell their boss or customer they can't do it. Help people not shoot their own foot off is all I am saying. I agree with the audience part. The average dev also does not work in silicon valley or in a FAANG. They work in bigcorp,consulting or government where you do your best with unreasonable requirements and little cash to spare for third party experts.