-
@jvehent @chrismckee @aprilmpls In crypto, we have plenty of example of why risk-trade-off is bad.
-
@jvehent @chrismckee @aprilmpls Specially because we have plenty of example of « someday » transformed to « never ».
-
@jvehent @chrismckee @aprilmpls Example : SHA-1. First ballot : end in 2016. cabforum.org/2014/10/16/ballot-118-sha-1-sunset/
-
@jvehent @chrismckee @aprilmpls « Oh no, we did nothing. Can we delay to 2017 ? » cabforum.org/pipermail/public/2015-October/006121.html
-
@jvehent @chrismckee @aprilmpls Same for SSL (><). PCI-DSS change from 2015 to 2018 (><) : blog.pcisecuritystandards.org/migrating-from-ssl-and-early-tls
-
@jvehent @chrismckee @aprilmpls This is what « business trade-off » means : at best « too late », at worst « never ».
aeris22’s Twitter Archive—№ 38,190