[Cryptography] Are zero knowledge authentication systems safe?

[Salz, Rich]

> The good news here is that people are actively doing security modeling and
> proof for the evolving TLS 1.3 standard, AND the TLS working group is
> enthusiastically welcoming their results.

Yes.  See https://www.internetsociety.org/events/ndss-symposium-2016/tron-workshop-call-papers

TLS 1.3 -- hack it, break it, show what's wrong.