3 ms·
We need to start building crypto in, from the beginning. The crypto should be just another feature--totally transparent to the user. That way, when it is late
by Expez 14y ago
We need to start building crypto in, from the beginning. The crypto should be just another feature--totally transparent to the user.
That way, when it is later decided that everything has to be monitored for commercial, or security, purposes, it now has to be explained how a feature--which the user has been taking for granted--will now suddenly disappear.
The hope, of course, is that this would be more difficult for Acme Inc. to do, as opposed to just silently handing out the keys to the backdoor.
I also believe that this way of doing it--essentially announcing that privacy is ending when cryto is removed--might cause a bigger outcry. It is pretty clear, by the lack of reaction to threads like these, that the user already expects to be monitored.
We need to change the default back to a world where the user is not being watched.
- MichaelGG 14y agoI bet a lot of engineers will agree. Even businesses might go along with it. The problem that's unsolved is not the will for crypto, it's key management. There's no transparent way to handle key management. If it's transparent, that means it can be transparently broken, too. The other issue is data recovery. You can't choose full security and also have a "oops I forgot my password, please restore" feature. If these actual hard technical problems are solved, I'm sure security will spread very quickly.