If this dude is in charge of anything non-crypto related then fine, whatever. But if he is responsible for TLS/SSL or similar, then I have "concerns" given their personal history with the NSA and pushing crypto backdoors.
If this dude is in charge of anything non-crypto related then fine, whatever. But if he is responsible for TLS/SSL or similar, then I have "concerns" given their personal history with the NSA and pushing crypto backdoors.
He may have been wrong on Dual EC, but he was far from alone in this case... What was your position at the time again?
The NSA leadership would be utterly incompetent if they have not planted people in the FOSS world.
(I gave a talk about that, google "Operation Orchestra")
edit: s/and/an/
And I have no reasons whatsoever to think ekr could be an NSA mole...
I'm familiar with your writing and believe you could produce any number of valid, incisive critiques of the IETF TLS standards process (I'm no fan of it myself).
That being the case, you might want to be wary that you're unintentionally lending your name to a whispering campaign. The question of whether TLS is inept is orthogonal to the question of EKR's motives. Nobody involved in the IETF TLS effort during OpaquePRF did an especially great job of honing TLS into a coherent and secure transport protocol, but many of them worked very hard and in good faith to try.
Please be respectful. This is not respectful. And it does not help make a rational argument.
They should have all done what snowden did.