On the 10th anniversary of the Snowden revelations

Re:On the 10th anniversary of the Snowden revelations by willis936 on Wednesday September 06, 2023 @05:49AM (#37403082)

>People in the business have taken precautions like using more encryption

Do you mean for their own small scale activities?

The only ECDH curves possible to use on the big tech internet were given by the head of the NSA with no explanation and are manipulatable.

[ Parent | on HN ]

Re:On the 10th anniversary of the Snowden revelations by denton-scratch on Wednesday September 06, 2023 @06:46AM (#37403393)

ED25519 is not a NIST curve.

[ Parent | on HN ]

Re:On the 10th anniversary of the Snowden revelations by willis936 on Wednesday September 06, 2023 @07:05AM (#37403491)

And Ed25519 is not supported by major CAs.

[ Parent | on HN ]

Re:On the 10th anniversary of the Snowden revelations by denton-scratch on Wednesday September 06, 2023 @09:03AM (#37404515)

Oh, major CAs. GP spoke of Ed25519 not being useable on "the big tech internet", but didn't mention certificates or certificate authorities.

[ Parent | on HN ]

Re:On the 10th anniversary of the Snowden revelations by throw0101c on Wednesday September 06, 2023 @09:46AM (#37405071)

> And Ed25519 is not supported by major CAs.

Perhaps because until February 2023 (when FIPS 186-5 was published) it wasn't approved for US government use:

So there would have been complications for a sizeable base of potential customers (US, contractors, allies).

[ Parent | on HN ]

Re:On the 10th anniversary of the Snowden revelations by INTPenis on Wednesday September 06, 2023 @10:53AM (#37406062)

I meant in many ways, not just encryption. Just didn't feel like elaborating.

For example my $dayjob does government contracts (in europe) and we're noticing a lot more agencies request on-prem, within borders, service hosting.

[ Parent | on HN ]