News for hackers. Stuff that matters.

A comment on Google to Implement IETF's Message Layer Security (MLS) Specification RFC 9420.

Re:Google to Implement IETF's Message Layer Security (MLS) S... by upofadown on Saturday November 11, 2023 @11:45AM (#38231858)
>Without robust standardization, the result will be a spaghetti of ad hoc middleware that could lower security standards to cater for the lowest common denominator and raise implementation costs, particularly for smaller providers.

This seems to be based on the same sentiment as expressed in XKCD-927[1]. We will fix a standardization mess by introducing a new standard that covers all the existing use cases. Dunno if efficient end to end encrypted groups with thousands of users actually counts as an existing use case. There doesn't seem to be any way to make such a thing practical in actual use.

[1] https://xkcd.com/927/

[ Parent | on HN ]
Re:Google to Implement IETF's Message Layer Security (MLS) S... by halJordan on Sunday November 12, 2023 @03:24PM (#38243766)
We all love xkcd but the incredulity wears thin. This isn't like 14 existing groups with 14 standards and a 15th bro coming up with a 15th standard. This is more like 14 existing groups with 14 standards coming together and saying let's replace our 14 standards with a single 15th standard.
[ Parent | on HN ]