logoalt Hacker News

tptacek • yesterday at 7:08 PM • 1 reply • view on HN

See, this doesn't work either. One of the core jobs you have designing a secure transport is avoiding downgrade attacks, and the construction you just outlined is not only downgradable, it's explicitly downgradable, as a feature. That's not going to happen.


Replies

kensey • yesterday at 7:16 PM

So the answer is just to use only the weaker option forever?

➕ show 1 reply