armb

One way of thinking about it is that each bit has maximal information because knowing the entire previous history should give you no information about what the next bit will be ahead of it being revealed.

Quantum Key Distribution. You can prove that the key hasn't been intercepted. But since that means you need a direct point to point connection with no routers, switches, hubs, amplifiers/repeaters etc., it only works for a tiny fraction of cases. https://en.wikipedia.org/wiki/Quantum_key_distribution

I've seen it work when two-thirds of the company being acquired had largely the same objections.

If the user installs a Firefox update and then all their HTTPS connections stop working, most users will blame Firefox unless the error messages are very specific about Lenovo's involvement, which simple blacklisting won't do. Users who follow technical news and understand the problem will already have removed the certificate manually (and removed the proxy).

Since the heads up _as given_ turned out to be detailed enough to give away the problem, that's clearly false. https://bugzilla.mozilla.org/show_bug.cgi?id=1076983#c51