5 ms·
In the vast majority of cases, governments are not your adversary, or are very far down the list of priorities. They may have to follow the law, but the majori
by daeken 13y ago
In the vast majority of cases, governments are not your adversary, or are very far down the list of priorities. They may have to follow the law, but the majority of other adversaries don't; that's why we are concerned about XSS, buffer overflows, and all other attacks against implementation flaws.
That said: yes, bad crypto will defend against government 'attacks' as well as good crypto will, if you assume they're going to play by your rules. But it's still better to do it the right way.
- DenisM 13y agoI don't think you understood my post at all. My point is that adding in-browser crypto to a web app (https-only site, no external resources loaded, yada yada) has substantial impact on whether the information is disclosed or not in the end, in particular when we are talking about legally compelled disclosure. Do you agree or not?
- daeken 13y agoI agree only in the case of a legally-compelled disclosure. For all other cases, there are a million simple means by which you can break it.