On Wed, Dec 04, 2013 at 09:18:52PM -0800,
 Bruce Perens <[email protected]> wrote 
 a message of 27 lines which said:

> I don't think we can say for sure that TLS is any hurdle to NSA's
> mass surveillance program at all.

Besides obvious remarks (secret agencies are secret), what is the
consequence to draw from this observation? That we should not use TLS
because it is possible that NSA has successfully attacked it? If so,
that would be a poor decision. First, there are other attackers, which
do not have the same resources as the NSA. Second, even the NSA cannot
break the law of physics (testing 2^256 possibilities take a lot of
time, even when you have money). Third, since we don't know, it seems
to me the reasonable thing to do would be to protect ourselves, just
in case.

[Insert here paranoid remarks about the NSA spreading the rumor that
it can break TLS so people won't encrypt and therefore the NSA will
not have to break TLS.]
_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass

Reply via email to