4 ms·
Well, if your app uses the network use SSL for instance. Avoid cleartext wherever possible.
by simias 13y ago
Well, if your app uses the network use SSL for instance. Avoid cleartext wherever possible.
- npizzolato 13y agoI believe his point was that the website makes no mention of SSL or any other examples of NSA-resistant features. "Add one NSA-resistant feature to your app" without any further explanation is not exactly informative or helpful.
- mindslight 13y agoThe problem is that SSL (transport security) is the only "NSA-resistant" feature that can ever be added to a website, or incrementally added to an app. And it only works until you (or your hosting provider) gets big enough that NSA demands (or takes) direct access to you, the man-in-the-middle. Unless your application is open source, administered by a user-controlled package manager, based on end-to-end encryption with user-managed keys, and takes steps to obscure communication-graph metadata, touting the addition of "NSA-resistant" security features is selling snake oil.
- deleted 13y ago[deleted]