4 ms·
I always assumed that the worth of these logos (along with the phrase "military grade encryption" and people who advertise "256bit AES") was that they enabled u
by moxie 13y ago
I always assumed that the worth of these logos (along with the phrase "military grade encryption" and people who advertise "256bit AES") was that they enabled us to easily identify the projects that we didn't want to trust with our data.
- harshreality 13y agoIt's not about security; it's about conversion rates and customer comfort level. Blame the customers or the web browsers, not the websites.
- shitlord 13y agoWhat's wrong with "256bit AES"? I'm not well-versed in this stuff.
- JanneVee 13y agoIt refers to a blogpost from 2009 on the Matasano blog. I found a copy of it here (my apologies to tptacek I can't find it at matasano.com). http://www.cs.berkeley.edu/~daw/teaching/cs261-f12/misc/if.html http://www.cs.berkeley.edu/~daw/teaching/cs261-f12/misc/if.h... The gist of it is that just having "256bit AES" tells nothing if it is properly implemented with a robust block mode, proper key generation and if it is signed.