3 ms·
In addition, «GPG for data at rest. TLS for data in motion. … If you're typing the letters A-E-S into your code, you're doing it wrong.» — Thomas Ptacek https
by gioele 12y ago
In addition,
«GPG for data at rest. TLS for data in motion. … If you're typing the letters A-E-S into your code, you're doing it wrong.» — Thomas Ptacek
https://web.archive.org/web/20090911032333/http://chargen.matasano.com/chargen/2009/7/22/if-youre-typing-the-letters-a-e-s-into-your-code-youre-doing.html https://web.archive.org/web/20090911032333/http://chargen.ma...
- rimantas 12y agoWasn't that more of "don't implement crypto yourself" than "don't use AES" though?
- akerl_ 12y agoIndeed. Which carries through to this: If you're telling your users that you use {lower_level_crypto}, either you really mean "we're using GPG", and you should say that, or you rolled your own and you're violating the aforementioned suggestion.