BaconVonPork

4 ms·

1.
by BaconVonPork 10mo ago
When I look at JSON related crypto, say JWT or WebAuthn, I am (un)comfortable saying the CVE causing complexities are there but repeating and not consolidated on a standard layer.
2.
by BaconVonPork 10mo ago
You are saying people shouldn't want what they want and since JSON has no standards for it you assume it won't happen. Not even X509 is interested in working with detached signatures. > It does not matter whether your serializa
3.
by BaconVonPork 10mo ago
Then if AI were the only consumer of wafers they would fall short of declaring themselves an illegal monopoly.
4.
by BaconVonPork 10mo ago
How is that different than the Nuremberg defense in combination with Hitler declaring Jews subhuman? One can claim Trump knowingly committed an international crime by declaring someone a terrorist when it would result in the US' crimin
5.
by BaconVonPork 10mo ago
This seems like a distinction without meaning. The question is whether JSON serializations intended for canonical signing would be somehow safer than those XML serializations. Obviously people would like all the same features that caused pr
6.
by BaconVonPork 10mo ago
The problem is not a personal hardware security module, as you noted we have them. The problem is that people want redundancy that undermines the point. If you can easily have a copy of your ring just in case, how do you know who has done t
7.
by BaconVonPork 10mo ago
Social conservatism is disgust. They don't want to see through simple explanations that let them feel less disgust for themselves.
8.
by BaconVonPork 10mo ago
It is probably lazy in the sense that they would need more lawyers and more careful ToS. Defending their ability to shut anyone off completely is a lot easier than dealing with lawsuits from customers denied X, denied Y, denied Z in regions
9.
by BaconVonPork 10mo ago
That's basically a variant of the halting problem and what you hope to get is a supervisor responding. If people expected this I don't think they would be as confused about the difference between statistical analysis of responses