ietf
[Top] [All Lists]

Re: [saag] Adept Encryption: Was: DANE should be more prominent (Re: Review of: Opportunistic Security -03 preview for comment)

2014-08-22 14:52:05
Nico,
On Fri, Aug 22, 2014 at 12:25 AM,  <l(_dot_)wood(_at_)surrey(_dot_)ac(_dot_)uk> 
wrote:
Okay, so with opportunistic security, all a man in the middle has to do is 
block any communications he can't decrypt, and it automatically downgrades to 
select something he can break?

Ah, there's the opportunity. Got it.
Eh?  The idea is to be downgrade resistant.

Nico
It's nice if the OS mechanism is downgrade resistant, but that is not required by
the current set of design principles.

Steve

<Prev in Thread] Current Thread [Next in Thread>