Thursday, September 23, 2010

Security Lessons Learned From The Diaspora Launch: MicroISV on a Shoestring

Security Lessons Learned From The Diaspora Launch: MicroISV on a Shoestring: "This is what kills most encryption systems in real life. You don’t have to beat encryption to beat the system, you just have to beat the weakest link in the chain around it. That almost certainly isn’t the encryption algorithm — it is some inadequacy in the larger system added by a developer who barely understands crypto but who trusts that sprinkling it in magically makes it better. Crypto is not soy sauce for security.

- Sent using Google Toolbar"

No comments: