Reply to post: Re: Doesn't everybody ...

Auto crypto algo validation? Protocol prototype here

jfigus

Re: Doesn't everybody ...

Self-tests are a good idea. But what if a developer botches something in the self-tests? Third-party crypto validation provides another level of protection for people that are serious about privacy.

Spoofing the server??? It doesn't sound like you're familiar with ACVP. ACVP uses TLS, along with mutual auth using X.509 certificates. While not inconceivable, spoofing the server or the client will be a challenge.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2022