Re:Three layers of encryption keeps you safe when SSL/TLS fails
by hlandau on Friday February 24, 2017 @06:02AM
(#13722607)
This is simply not true. If TLS fails, the vehicle used for code delivery has been compromised and can be used to deliver compromised code. Everything written in the article is only true if you assume that the code is delivered with its integrity in tact, which on the web is a property that can only be guaranteed by TLS.
[ Parent
| on HN ]
Re:Three layers of encryption keeps you safe when SSL/TLS fails
by ubernostrum on Friday February 24, 2017 @07:40AM
(#13723063)
The article wasn't about delivering software updates. 1Password provides syncing of password vaults and online access, and this article explains how they do not rely solely on SSL/TLS to secure that data in-flight, and thus the Cloudflare issue could not have exposed such data in a usable way to third parties.