Subnostr

Long ago the US government wanted to put a "clipper chip" in everybody's computer. This chip would encrypted traffic (wasn't common at the time) but witih a backdoor so that law enforcement could see your data.

Later NIST recommended Dual_EC_DRBG encryption that suspiciously could have been constructed with a backdoor, and later evidence from Snowden indicated that it probably did have this backdoor.

Also the P curves (P-224, P-256, and P-384) were constructed with numbers that are unexplained and could weaken the algorithm if you know the secret of how those numbers were chosen.

Chrome and Firefox do not support ed25519 in TLS, but they do support the P-curves.

I suspect TLS isn't secure against the NSA unless both sides are using algorithms that the NSA can't break, which in the browser HTTP world is hardly possible.

ed25519 isn't the only algorithm with nothing up it's sleeve (https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number) but it has become the most popular and is quite efficient.

In the rust world, if you control both endpoints, you can use a more trustworthy TLS like https://github.com/mikedilger/alt-tls If you don't control both endpoints, the TLS will probably fail to negotiate a secure algorithm.

nostr:nevent1qqs0f0q9fcmwne865ecu6xy6qy0xl53pws2ewhpxtf429huj4hlrn2qfuvutz

Autumn Sun ☀️🌘☯️ 9mo ago

And one of the more recent actions of the management of Mozilla (after Brendan Eich was ousted) was to cut development and engineering resources while redirecting funds to the new managements compensation plans plus focusing on useless fluff like user interface colour schemes and ancillary services like a mozilla fediverse instance (now dead, thankfully), mozilla vpn ( just mullvad with branding), and a "personal data scrubbing service" whose chief person was a person that used to own a data brokerage.

All while taking a huge glob og Google money every year.

But don't sweat it, Mozilla now has a new LOGO which somehow communicates their values and new found company focus to the users!

It all stinks to high heaven.

Reply to this note

Please Login to reply.

Discussion

Mike Dilger ☑️ 9mo ago

Yeah I hate where Mozilla went. But when using the web stack, I don't like the others either. I'm really less and less interested in the entire web stack. I think it has become hyper complex, and that is not a good thing.

Of course I still use the web. But when I make technology I try to avoid it. It's not necessary for new technology.