> [..] but I take issue with the "break SSL = break JS crypto" argument. Respectfully, I'd suggest that this is not the argument. The argument is that breakin

> [..] but I take issue with the "break SSL = break JS crypto" argument. Respectfully, I'd suggest that this is not the argument. The argument is that breaking SSL = accessing the data the crypto protects. Crypto is a means to an end...which is protecting sensitive information. moxie decidedly did not "break" the crypto, because he didn't have to. It's a bit like a bank vault with the world's strongest door, but when it was installed they put in a 4' x 5' window next to the door. The vault door (aka the crypto) is fine and unbroken, but I still can get access to your money because your security system has a weak point.