4 ms·
According to Kerckhoff, "A [crypto]system should be secure even if everything about the system, except the key, is public knowledge." If any amount of your sec
by tightfleece 12y ago
According to Kerckhoff, "A [crypto]system should be secure even if everything about the system, except the key, is public knowledge."
If any amount of your security depends on hiding how the system works, you have a broken system (according to said law).
Nobody is arguiung that the van passcodes or personnel files should be disclosed; those specifics are immaterial. We are asking that how the system works, and how that is evaluated, be made public, and be placed under scrutiny. Otherwise, there is no reason to believe this system does anything but provide a vector for corruption.
- uxp 12y agoAdditionally, the court is not asking for the schedule and routes of the vans to be released. Knowing where a security guard is at any given time is much more useful than knowing that security guard's name. I don't think that really falls under the obscurity part, but I could be wrong.