3 ms·
TLS and NaCl are entirely different beasts. NaCl is a nice piece of technology, but TLS isn't just a technology solution; it's fundamentally a policy solution.
by rakoo 12y ago
TLS and NaCl are entirely different beasts. NaCl is a nice piece of technology, but TLS isn't just a technology solution; it's fundamentally a policy solution. TLS solves (or tries to, at least) both the "who am I talking to" problem and the "are we talking securely" problem.
NaCl can only replace the second one, which is a nonsensical idea to propose because it's not an issue (and it's the easier problem to solve anyway)
- gwu78 12y agoThe first problem can be addressed by the CurveCP prototype, which uses NaCl. tinysshd (see tinyssh.org) coupled with curvecpserver is a working example.