Hacker News Reader

dog slow does not necessarily mean less secured.

https://bugzilla.mozilla.org/show_bug.cgi?id=1128792

so far, absolutely no justification for Google to drop P-521: https://bugzilla.mozilla.org/show_bug.cgi?id=1129077

https://security.stackexchange.com/questions/100991/why-is-s...

The linked Mozilla bug report provides an excellent reason to drop P-521.

If you look at the telemetry for last actual Firefox release, only 8 (yes, eight!) out of 1.67 BILLION handshakes used a P-521 curve. This is a good indication that P-521 isn't needed, at least for certificates verified by web browsers.

Well, I need it. So, I get to have this. Isn’t the Internet awesome?

Reply on news.ycombinator.com