The AT protocol is the most obtuse crock of s*

Re:The AT protocol is the most obtuse crock of s* by account42 on Friday May 12, 2023 @05:58AM (#35914078)

HTTP is fine for a lot of uses. So is MD5.

Crytography and security in general are often cargo-culted without any consideration for the negative implications.

> this cryptoepiphan

Bro are you for real.

[ Parent | on HN ]

Re:The AT protocol is the most obtuse crock of s* by gojomo on Saturday May 13, 2023 @02:44AM (#35926209)

It was clear that MD5 didn't meet the goals it was designed for in 1994, when experts recommended it be phased out for its originally intended uses.

It's not fine here in 2023.

If you need a secure hash, it's been proven broken for 10 years now.

If you don't need a secure hash, others are far more performant.

Using it, or worse, advocating for its use, is a way to signal your thinking is years behind the leading edge, and also best practices, and even justifiable practices.

HTTP's simplicity could make it tolerable for some places where world-readability is a goal - but people, echoing your sentiments here, have said it was "fine" even in situations where it was putting people at risk.

Major browser makers recognize the risk, and are now subtly discouraging HTTP, and this discouragement will grow more intense over time.

[ Parent | on HN ]