3 ms·
I'm seeing a lot of polemic and handwaving but missing substance, sorry. What is the actual problem with RSA in this context, assuming OpenSSL is used correctl
by moe 15y ago
I'm seeing a lot of polemic and handwaving but missing substance, sorry.
What is the actual problem with RSA in this context, assuming OpenSSL is used correctly? What are the common pitfalls?
- tptacek 15y agoI'm definitely not providing all the substance, you're right.
- harshreality 15y agoI take it you're being sarcastic, but the negative comments you're receiving are I think because you departed from giving advice on implementation and strategy, and attempted to give a piece of cryptographic advice. The only way anyone gets to imply that public key crypto is less secure, or more dangerous, without being challenged, is if a new attack is presented. Otherwise it's all innuendo and handwaving. Most apps and sites may not derive any advantage from public key crypto, but you can't say that for sure until you see a site (or SSO multi-site) design.
- tptacek 15y agoI'm not being sarcastic. I'm simply not interested in going into more detail on this topic. I don't think anyone who's opinion I care about on HN thinks I'm dealing in innuendo on crypto topics.