News for hackers. Stuff that matters.
Re:Facebook Messenger begins testing end-to-end encryption u... by buu700 on Friday July 08, 2016 @11:57AM (#12056427)
lol, I'm definitely biased given that I'm long since familiar with the idea and wrote the implementation, but I think it's more conceptually counterintuitive/clever/weird than it is actually complicated in terms of having many moving parts.

WebSign does have a patent pending on it (I think it's fair enough to say that the whole system of accomplishing in-browser code signing this way was non-obvious), but HPKP Suicide itself doesn't. Bryant (eganist) and I are actually disclosing and open sourcing implementations of a few non-code-signing applications of HPKP Suicide at Black Hat and DEF CON next month.

Re:Facebook Messenger begins testing end-to-end encryption u... by cyphar on Saturday July 09, 2016 @09:36AM (#12061255)
> WebSign does have a patent pending on it (I think it's fair enough to say that the whole system of accomplishing in-browser code signing this way was non-obvious),

Yay, another technology to boycott entirely.