7 ms·
This article ignores the complexity of not encrypting everything. What is the recourse for the average Joe when his social network doesn't encrypt logins? Face
by sqeaky 12y ago
This article ignores the complexity of not encrypting everything.
What is the recourse for the average Joe when his social network doesn't encrypt logins? Facebook did this for years, the average user just ignored it and logged in, no amount of training or convincing could dissuade many.
What will the user interface look like for a site that is not encrypted but verified secure? It is hard enough to get people verify the lock icon is green or gold. Many ignore and just assume that online shopping is so fraught with hackers that it cannot be done safely. This will not help that situation.
Why do we care about the cost of CPU cycles? No matter how good the encryption is a human still needs to make a decision. Settling on a simple one helps the human make it faster. CPU cycles get cheaper every year but the brain hasn't improved in thousands.
Encrypting everything is simple and can be made to work even for less technical people.
- sqeaky 12y agoAs a secondary point even if don't get simplicity isn't incorrectly setup encryption, better than none? For one example: Self signed certificates don't protect you from a man in the middle perpetrated by the government or ISP, but they will stop neighbors with packet sniffers. If we forgo simplicity I will still encrypt what I can. Having only some protection is not the same as my protection being an illusion.