3 ms·

My problem is with NIST, your problem is with DJB. Neither of us really want to defend either, (I assume, maybe you do want to defend one of them?) We just disa

My problem is with NIST, your problem is with DJB. Neither of us really want to defend either, (I assume, maybe you do want to defend one of them?) We just disagree which one is more likely to make the world worse. I'm not taken in by the crazyness on either side, and while if pressed, it's obvious which side I would pick. I'm not so much picking a side, so much as complaining again, how we're letting a group with an earned reputation for being untrustworthy keep secrets about crypto. I hate the whole thing, but that's how little trust I have left in other people. The crazy guy is the on the side I hate less... but what to do? edit: > You're making my point for me. Nobody in the whole world is asking for you to take NIST's word for anything. Literally everyone standardizing on Kyber is asking me to trust NIST, et al, and pay the additional overhead for setting up a TLS connection. I guess you could frame it as they're not asking, because I'm not being physically forced to interact with them... but then I try really hard not to engage with bad faith bait, when I'm able to resist.

tptacek 3mo ago
No, nobody is asking you to trust NIST.
- grayhatter 3mo ago
  Did you really need me to specify rhetorically speaking? You weren't able to work out that on your own?
  - tptacek 3mo ago
    Nobody is even rhetorically asking you to trust NIST.
    - grayhatter 3mo ago
      If you run a server using TLS, and that server select Kyber, does the security of the connection depend on Kyber being sound? If I need to trust the security of the connection. I have to trust the server, because the server trusts Kyber, that means I have to trust Kyber, because I have to trust the server. > you don't have to trust the server oh, sorry I should have realized this wasn't a conversation anymore
      - tptacek 3mo ago
        I don't even know who you're replying to anymore; who are you quoting? You get that you and I are the only people reading this, right? You're not going to convince me; you already opened this conversation up by acknowledging you're totally unfamiliar with the field you're commenting on.
        grayhatter 3mo ago
        Nah, that's on me: I was irked by the feeling that you weren't trying to talk in good faith. I still don't think you're trying to but at least now I'm less annoyed, and can apologize for trying to troll you in my last msg. Good luck buddy :)

tptacek 3mo ago

No, nobody is asking you to trust NIST.

grayhatter 3mo ago
Did you really need me to specify rhetorically speaking? You weren't able to work out that on your own?
- tptacek 3mo ago
  Nobody is even rhetorically asking you to trust NIST.
  - grayhatter 3mo ago
    If you run a server using TLS, and that server select Kyber, does the security of the connection depend on Kyber being sound? If I need to trust the security of the connection. I have to trust the server, because the server trusts Kyber, that means I have to trust Kyber, because I have to trust the server. > you don't have to trust the server oh, sorry I should have realized this wasn't a conversation anymore
    - tptacek 3mo ago
      I don't even know who you're replying to anymore; who are you quoting? You get that you and I are the only people reading this, right? You're not going to convince me; you already opened this conversation up by acknowledging you're totally unfamiliar with the field you're commenting on.
      - grayhatter 3mo ago
        Nah, that's on me: I was irked by the feeling that you weren't trying to talk in good faith. I still don't think you're trying to but at least now I'm less annoyed, and can apologize for trying to troll you in my last msg. Good luck buddy :)