4 ms·

FIPS is actively harmful to security by virtue of being an empty and ill-conceived certification. Removing FIPS from an otherwise best available option is to th

FIPS is actively harmful to security by virtue of being an empty and ill-conceived certification. Removing FIPS from an otherwise best available option is to the benefit of the industry at large. By comparison, glossy marketing of a security effort offers no security benefits, and plenty of room within which to hide bad ideas such as FIPS.

mhurron 13y ago
As others have said, the technical arguments against FIPS don't mean anything when a huge potential customer requires it.
- worklogin 13y ago
  And huge potential customers don't mean anything to a non-profit open source ecosystem that actually care about security.
  - mpyne 13y ago
    When did Red Hat and Google become non-profits? Did I miss something?
    - nitrogen 13y ago
      RedHat and Google can afford to add FIPS to their own Libre SSL if they want to stop using OpenSSL.