3 ms·
Doesn’t it at least keep snake oil crypto out of government? If it were removed it should be replaced by something. No standard would lead to a lot of crap bein
by api 1y ago
Doesn’t it at least keep snake oil crypto out of government? If it were removed it should be replaced by something. No standard would lead to a lot of crap being deployed.
- akerl_ 1y agoIt’s way better at preventing usage of modern crypto than it is at blocking snake oil.
- api 1y agoYou seem to be assuming modern well designed crypto would win in government contracting with no standard.
- akerl_ 1y agoI’m speaking from experience, not assuming. The way you get quality products is by requiring and validating quality, not by picking a lowest common denominator and then pinning it in place for a decade with paperwork and calcified standards bodies.
- tptacek 1y agoA lot of FIPS-compatible crap is already deployed, and our most secure and trusted cryptography generally wasn't created under any standards regime.