[cryptography] World-class protracted social engineering [was: Re: Key escrow 2012]

[Peter Gutmann]

"James A. Donald" <jamesd at echeque.com> writes:

>You attribute too much competence to our enemies.  The problem is that our
>tools are unsatisfactory, no one wants to use them.  They need improvement.

Yup.

>One tool that works and is widely used is the vpn.

And Skype.  And SSL (as anon-DH opportunistic crypto).  And STARTTLS.

The defining characteristics of those two groups are that #1 is something that
business requirements dictate you have to use Or Else and that (typically)
some other poor guy sets up for you (or at least does the majority of the hard
work), and that #2 is completely transparent to the user.  Unfortuately the
latter group is anathema to crypto purists because none of the technologies
use [insert long list of security pixie dust here], which coincidentally is
also all of the stuff that makes the security tools too hard to use.

Peter.
_______________________________________________
cryptography mailing list
cryptography at randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography

----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE