News for hackers. Stuff that matters.

A comment on Security by obscurity is underrated. Parent comment

Re:Security by obscurity is underrated by wglb on Friday September 11, 2020 @08:09PM (#24448675)
Age is demonstrably better: https://github.com/FiloSottile/age

Also, an informed analysis of PGP: https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

[ Parent | on HN ]
Re:Security by obscurity is underrated by anonymousse1234 on Saturday September 12, 2020 @04:26AM (#24450869)
Informed analysis like lack of forward secrecy in something made for non ephemeral communication - for storing, sending files, digital signatures etc. Or backwards compatibility so you can access and verify your backups, archives etc. from 10 or more years ago.

Show me ephemeral encryption scheme for something that needs to be readable in the future like that.

This analysis is highly uninformed I would say.

[ Parent | on HN ]
Re:Security by obscurity is underrated by aborsy on Saturday September 12, 2020 @06:30AM (#24451415)
It’s not an informed analysis, or even an analysis at all.

That’s not how analyzing algorithms or programs work. Even a basic threat model is missing.

[ Parent | on HN ]