News for hackers. Stuff that matters.

A comment on More Than One Third of Tutanota Emails Are End-To-End Encrypted. Parent comment

Re:More Than One Third of Tutanota Emails Are End-To-End Enc... by MatthiasPfau on Wednesday September 16, 2015 @04:25AM (#10225345)
> Why is there so much resistance to implementing authenticated encryption?

We already stated that we are going to implement authenticated encryption. But when we do it we have to do it right. We have to keep everything backwards compatible and we can't enable one client to use the new implementation until all supported clients (JS, .NET (Outlook), Android and iOS) are upgraded. Implementing this kind of backward compatibility will not take only 10 minutes.

Please submit a pull request that keeps everything backwards compatible and works for all platforms. We are happy about everyone who wants to contribute.

[ Parent | on HN ]
Re:More Than One Third of Tutanota Emails Are End-To-End Enc... by sarciszewski on Wednesday September 16, 2015 @09:18PM (#10231018)
> Please submit a pull request that keeps everything backwards compatible and works for all platforms.

Secure crypto is never backwards compatible with insecure crypto. If you want to expose your users to downgrade attacks, have fun.

[ Parent | on HN ]