• 0 Posts
  • 17 Comments
Joined 9 months ago
cake
Cake day: February 11th, 2024

help-circle






  • Preliminary calculations show that it would take decades to break this cryptographic separation [between a subscriber account and its associated network traffic]

    The unnecessary rubbishing of Android VPNs seemed like one red flag in there. Is that another one? It seems both unlikely given the kind of traffic analysis that could be brought to bear, and very unimpressive that the hypothetical time to break it is measured only in decades rather than the multiples of the age of the universe that seem more normal when discussing things that are meant to be cryptographically secure.

    But it would nonetheless be interesting, if Google hadn’t shut it down last year as seems to be the case far as I can tell.







  • EU trilogue answer to mozilla

    That link is not to an EU trilogue as I gather the term is normally used. It is to some kind of lobbyist group representing industry participants who presumably stand to profit in some way from the legislation as proposed. It is full of disingenuous nonsense such as “Mozilla already accepts QWACS — so how can Article 45.2 be a problem for Mozilla?” It completely ignores the substance of Mozilla’s complaint.

    There is no need for problematic legislation interfering with everyone’s web browsers in order to get them to accept these cert authorities: The makers of web browsers will absolutely be happy to do so, as long as they are not used for anything nefarious. If this is the best that “European Signature Dialog” can come up with, all it demonstrates is that there is absolutely no reason not to make the changes that Mozilla and others call for.