Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Doesn’t it at least keep snake oil crypto out of government? If it were removed it should be replaced by something. No standard would lead to a lot of crap being deployed.


It’s way better at preventing usage of modern crypto than it is at blocking snake oil.


You seem to be assuming modern well designed crypto would win in government contracting with no standard.


I’m speaking from experience, not assuming.

The way you get quality products is by requiring and validating quality, not by picking a lowest common denominator and then pinning it in place for a decade with paperwork and calcified standards bodies.


A lot of FIPS-compatible crap is already deployed, and our most secure and trusted cryptography generally wasn't created under any standards regime.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: