Re:Why Does My Remote Control Need to Know My Location?
by leggomylibro on Wednesday March 06, 2019 @11:11AM
(#19319968)
The issue is that you cannot forcibly update devices; not all users accept them, often because of the concerns which were being discussed in this thread.
But if you continue to 'support' the legacy algorithm to keep things working for those users, you also open them up to attack and they will surely complain if someone steals their information from "your service".
Offer the old crypto algorithms as a configuration option, or offer 2 versions of the firmware (standard vs. compatibility). Can't be prohibitively expensive, but isn't necessary when it's in the clear interest of customers not to use these old algorithms.