3 ms·

An issue that wasn’t mentioned: protecting an encryption-at-rest key is not so easy, and the solutions I’ve heard of that are easy to deploy are barely effectiv

• hansvm 2y ago
  > Cryptography is a tool for turning a whole swathe of problems into key management problems. Key management problems are way harder than (virtually all) cryptographers think.
  • salawat 2y ago
    >Cryptography is a tool for turning a whole swathe of problems into key management problems. Key management problems are way harder than (virtually all) cryptographers think. As someone who has issues remembering where they left their house keys at times, I want this on a bloody coffee cup/t-shirt. Further, every practicing cryptographer everywhere should be forced to keep one on their person at all times, and be required to present it to do normal tasks as a reminder to them of the suffering their work creates for others implementing their cryptosystems. They probably won't care. But it'd make me feel better if they were as annoyed in the everyday as much as I am wrangling this kind of nonsense.
    • CiPHPerCoder 2y ago
      > As someone who has issues remembering where they left their house keys at times, I want this on a bloody coffee cup/t-shirt. I've heard this quote a lot over the years, but the first person who said it was probably Lea Kissner, the former CISO of Twitter. Here's their most recent post of the same statement: https://hachyderm.io/@leak/110784289970982813 https://hachyderm.io/@leak/110784289970982813