undefined | Better HN

0 pointslgierth8y ago0 comments

You can lock it down to specific hash functions no problem.

0 comments

If I’ve learned anything from being in this field it’s that:

  1) many if not most implementations will support lots of algorithms by default, and
  2) as a result, approximately zero users will lock it down

acdha8y ago

3) the users who do lock it down will be harangued about not being compatible with less secure versions barring a major incident

Yeah that's exactly what I'm worried about. The nature of the beast makes it tricky to define a safe default.

j / k navigate · click thread line to collapse

If I’ve learned anything from being in this field it’s that:

  1) many if not most implementations will support lots of algorithms by default, and
  2) as a result, approximately zero users will lock it down

acdha8y ago

3) the users who do lock it down will be harangued about not being compatible with less secure versions barring a major incident

Yeah that's exactly what I'm worried about. The nature of the beast makes it tricky to define a safe default.

j / k navigate · click thread line to collapse