[Cryptography] RC4 again (actual security, scalability and other discussion)

[tpb-crypto at laposte.net]

> Yup. We would have been better off if they'd stuck to 40 bit crypto in
> 1994 and covered 100% of the web. It's relatively easy to upgrade from
> 40 bit to 128 bit. It's a real pig to upgrade from 0 bit to 40 bit.
>
> But you can't tell a standards group or a committee or a cypherpunk or a
> vendor or any other cartel things like that.
>
> Imagine going to PKIX and saying "oh, RC4 is fine, but can you make SSL
> opportunistic and phase out HTTP in favour of HTTPS, please? Pretty
> please?"

They will agree if you can accept a "trusted proxy", lol.

We ought to make something out of the standards bodies, they were hijacked years ago. What's the state of quantum-proof crypto, fellas?


Hello guys, I'm new to the list, pleasure to meet you,
TPB