3 ms·
After seeing STIR/SHAKEN's implementation details (hey what if we used JWT, and then maximized the metadata leakage of who you're calling), I really do not want
by some_furry 2y ago
After seeing STIR/SHAKEN's implementation details (hey what if we used JWT, and then maximized the metadata leakage of who you're calling), I really do not want to trust telecoms to roll their own crypto.
https://securitycryptographywhatever.com/2024/04/30/stir-shaken/ https://securitycryptographywhatever.com/2024/04/30/stir-sha...
- lxgr 2y agoAt least they're now only botching protocols instead of self-rolling low-level primitives like block and stream ciphers...