Post #3581950
2026-07-04 14:39 UTC
@letoams@defcon.social
Let's imagine you push this through. Then there will be push, for efficiency of course, to drop hybrid approach everywhere. Eventually, likes of Signal will be using only new pq algos, without adding proven encryption.
Would you make an official statement that you personally will appologize, if/when new algos and emplementation(s) found to have a bug.
Would you also pay appropriate ensurance.
As IETF you push this.
But I, as CSO will be responsible, when bugs are found.
@djb@mastodon.cr.yp.to
Replies (1)
-
@rsalz@ioc.exchange 2026-07-05 00:25
@mikalai@privacysafe.social @letoams@defcon.social @djb@mastodon.cr.yp.to if you let vendors sell you things you think are insecure sounds like you are responsible.