@sleevi_@kennwhite The relationship of private key, public key, and certificate remains obscure to many groups, so security becomes a mysterious property of the certificate, because there's a constituency that is motivated to cloud the actual mechanisms at work.
Honored to be asked to share how we think about #blockchain at 11:40a tomorrow at the Moscone as a Vision Speaker. Please join me, if you have the time. Microsoft lnkd.in/gYgsCJelnkd.in/gNDhXzT
@matthew_d_green Every crypto class should have a project to fix a broken crypto implementation in a way that can be deployed without breaking active customer implementations. And teach lesson #1: sniff the wire and look for plaintext before shipping.
In several years looking at industrial crypto I’ve learned that when people say “getting law enforcement backdoors working safely at scale will be hard”, they’re not kidding. I can say this because many existing devices barely get encryption right.
@scholiumwines "Winemaking in California" by Teiser and Harroun. Tons of quality pre-prohibition history. Check out the owner of the 1st Ravenswood winery: en.wikipedia.org/wiki/Christoph…
@SteveBellovin@matthew_d_green@tqbf Policy-making cryptographer priorities: excise tax on random oracles, post-quantum security for child restraints, and hours finding problems with other agencies non-adversarial rulemaking models
@matthew_d_green@tqbf There are plenty of advisory committees with subject matter experts in the government. What's rare is to find a policymaker like that. It's happened--Steven Chu, Obama's Secretary of Energy, won the Nobel Prize in physics--but it's unusual, and basically unheard of in CS.
@matthew_d_green I’m assuming this is a trick question and the answer is “I wouldn’t fall into the innumerable fundamental problems of designing a Latin-only character scheme that confuses glyphs and characters”