SHA1 sunset will block millions from encrypted net, Facebook warns
http://arstechnica.com/security/2015/12/sha1-sunset-will-block-millions-from-encrypted-net-facebook-warns/
We don't think it's right to cut tens of millions of
people off from the benefits of the encrypted Internet,
particularly because of the continued usage of devices that are
known to be incompatible with SHA-256. Many of these older
devices are being used in developing countries by people who are
new to the Internet, as we learned recently when we rolled out
TLS encryption to people using our Free Basics Platform. We
should be investing in privacy and security solutions for these
people, not making it harder for them to use the Internet safely
... The proposal by Facebook and CloudFlare to roll back some
of those changes touched off howls of dissent from some security
experts, including Ryan Sleevi, a Google employee who is a
member of the Chromium cross-platform crypto team.
- - -
I endorse the Facebook approach on this. More at: "Falling Into the
Encryption Trap" - http://lauren.vortex.com/archive/001108.html (6/2015).
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently doing so.
My opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
