3 ms·
"This dude" is one of the greatest expert on TLS, and one of the main TLS RFC authors. He's also well known as a privacy advocate, authoring pieces such as http
by brohee 11y ago
"This dude" is one of the greatest expert on TLS, and one of the main TLS RFC authors. He's also well known as a privacy advocate, authoring pieces such as http://www.educatedguesswork.org/2005/05/how_much_would.html http://www.educatedguesswork.org/2005/05/how_much_would.html
He may have been wrong on Dual EC, but he was far from alone in this case... What was your position at the time again?
- phkamp 11y agoGiven the fate of TLS3 I really don't see that as much of an endorsement ? The NSA leadership would be utterly incompetent if they have not planted people in the FOSS world. (I gave a talk about that, google "Operation Orchestra")
- pdkl95 11y agoThank you for giving such a clear explanation of the realpolitik affecting the Free Software community. "Operation Orchestra" is an incredible talk which had a significant impact on me. edit: s/and/an/
- brohee 11y agoI'm perfectly aware of your talk, I even once linked to it on this very site (https://news.ycombinator.com/item?id=8850229 https://news.ycombinator.com/item?id=8850229). And I have no reasons whatsoever to think ekr could be an NSA mole...
- tptacek 11y agoI do not believe that you actually believe EKR is an NSA plant, Mr. Kamp. I'm familiar with your writing and believe you could produce any number of valid, incisive critiques of the IETF TLS standards process (I'm no fan of it myself). That being the case, you might want to be wary that you're unintentionally lending your name to a whispering campaign. The question of whether TLS is inept is orthogonal to the question of EKR's motives. Nobody involved in the IETF TLS effort during OpaquePRF did an especially great job of honing TLS into a coherent and secure transport protocol, but many of them worked very hard and in good faith to try.
- javert 11y ago> What was your position at the time again? Please be respectful. This is not respectful. And it does not help make a rational argument.
- deleted 11y ago[deleted]
- blazespin 11y agoQuestion is totally valid. NSA is a terrible organization and anyone associated with it needs to deal with the consequences. They should have all done what snowden did.
- blazespin 11y agoQuestion is totally valid. NSA is a terrible organization and anyone associated with it needs to deal with the consequences. They should have all done what snowden did.