Re: [cryptography] World-class protracted social engineering [was: Re: Key escrow 2012]
"James A. Donald" <jamesd@echeque.com> writes:
You attribute too much competence to our enemies. The problem is that our tools are unsatisfactory, no one wants to use them. They need improvement.
Yup.
One tool that works and is widely used is the vpn.
And Skype. And SSL (as anon-DH opportunistic crypto). And STARTTLS. The defining characteristics of those two groups are that #1 is something that business requirements dictate you have to use Or Else and that (typically) some other poor guy sets up for you (or at least does the majority of the hard work), and that #2 is completely transparent to the user. Unfortuately the latter group is anathema to crypto purists because none of the technologies use [insert long list of security pixie dust here], which coincidentally is also all of the stuff that makes the security tools too hard to use. Peter. _______________________________________________ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE
participants (1)
-
Peter Gutmann