Post #3586918
2026-07-04 17:23 UTC
@letoams@defcon.social
I just realised that result of the process, however it is structured, will influence my bank's connection first. Even if Signal ignores IETF in this case, bank's contractors will blindly follow whatever you guys do. So, you will be morally responsible for removing conservatively added working crypto.
It isn't just about big targets. It is also about security of my and, I suspect, your money.
So, don't hide behind procedures. Please.
@pluralistic@mamot.fr @eff@mastodon.social
Replies (1)
-
@letoams@defcon.social 2026-07-04 18:13
@mikalai@privacysafe.social if they blindly do what we say, they will use the RECOMMENDED=Y entry for the hybrid. But also, browsers and web servers won’t offer it with a higher preference than hybrid, so no your bank connection will use the hybrid.