[Cryptography] bad advice, was New SSL/TLS certs

[Kent Borg]

On 4/22/25 10:12 AM, John Levine wrote:
>> We have never tried.
> I'm sorry, but that is not even within hailing distance of being true.

Maybe we tried to educate users /so/ quietly that I never noticed. I 
know we have tried to tell people how not to be ripped off in the 
physical world, because I have noticed that. And I can see results, that 
people I see in the real world are not idiots about physical security.

Maybe these days our schools /are/ teaching something about 
cybersecurity, I'm too old to know. But I have noticed people who take a 
serious interest in computer security saying (1) it is fundamentally 
wrong to try or (2) it won't work therefore it is pointless to try. If 
that is what the experts think, how good a job could our schools do?


Bravo to those unknown to me who might be off fighting against the tide.

-kb

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20250422/4ac43ce1/attachment.htm>