"2005 in review - The Year I lost my Identity"

[Peter Gutmann]

Ian Grigg's blog has a neat tongue-in-cheek review of the year in security.
Here's a sample:

  Browser manufacturers have moved slightly faster than your average glacier.
  Microsoft moved forward by announcing that phishing was a browser problem
  (Mozilla and KDE followed 8 months later), and again by putting some tools
  into the IE7 release. Another big step forward was announcing the switch-off
  of SSL v2.

  But Microsoft also moved backwards one step IMO by going for the "shared
  database of phishing alerts" idea pioneered by Netcraft. Computer scientists
  and security gurus are still scratching their heads over how that is ever
  going to work, given that it never worked the other several hundred times we
  tried it.

There's more there, definitely worth a read:
https://www.financialcryptography.com/mt/archives/000588.html

Peter.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com