3 ms·

I don't mind if the bill is weak, because real solutions are happening outside of electoral politics. Curve25519 deployment is now massive, for example. Libre

by Panino 12y ago

I don't mind if the bill is weak, because real solutions are happening outside of electoral politics. Curve25519 deployment is now massive, for example. LibreSSL is moving forward. RC4 has been ripped out of a lot of stuff and replaced with ChaCha. Salsa20 is in a ton of software and has many users. SafeCurves are getting discussion, especially ed448 and E-521. More people are deploying TLS. More people are conscientous. More people are protected by default without having to make an effort (TextSecure is a great example). My only sad point is that people are still talking about DNSSEC, which reduces security significantly if used for anything besides signing DNS records. I don't know why anyone not affiliated with Project Bullrun wants you to use RSA-1024 for security.

tptacek 12y ago
There is more wrong with DNSSEC than RSA-1024 (PKCS1v15 RSA, no less!). DNSSEC is a PKI run by world governments, most prominently that of the United States. It's hard to understand why anyone working in privacy would ever support it. Thankfully, it's dying on its own engineering (de)merits.