News for hackers. Stuff that matters.

fejr

Re:NIST "strongly" suggests dropping its own encryption standard on Friday September 13, 2013 @06:19PM (#6383552)
It does.

> The NIST standard describes what is known as an "elliptic curve-based deterministic random bit generator."

And also links in the first paragraph to: http://www.propublica.org/documents/item/785571-itlbul2013-0...

Parent is refering to public key pinning. Chrome for instance has been doing it the last couple years [1].

Also see Moxie's comment in this very thread. [2]

[1] https://www.imperialviolet.org/2011/05/04/pinning.html

[2] https://news.ycombinator.com/item?id=6381673

Older ยป