Open-source crypto is no better than closed-source crypto

Re:Open-source crypto is no better than closed-source crypto by TheDong on Thursday October 04, 2018 @02:57PM (#18142573)

That's a logically false inversion, assuming you take 'no better than' to mean '<=' (as I think makes sense in context).

OSS <= CSS does not imply CSS <= OSS...

> why on earth would you ever choose closed source components

There are often no open source alternatives to closed source things that are meaningfully equivalent. For example, the iPhone is a secure and closed source phone. There is no open source equivalent to that package. Android devices have critical closed source components with almost no exception, but also are not equivalent to an iphone in many meaningful ways.

I think a better take-away is the nuanced "evaluate things on a case-by-case basis, don't let a security system having closed source components needlessly bias you"

[ Parent | on HN ]

Re:Open-source crypto is no better than closed-source crypto by webkike on Thursday October 04, 2018 @05:10PM (#18143700)

I took “no better than” to mean approximately equal. I feel otherwise the author would have added “and possibly worse than”. I think your assumption however is probably more correct.

[ Parent | on HN ]