Caitlin
That feeling when your personal infrastructure is #postquantum Feels… cozy…
May 14 at 10:38pmWeb
Show threadEloy. 🔜 GPN24May 14
@mholiv I'm personally not the biggest fan of these not yet standard cipher suites hacked on top of TLS 1.3, I'm waiting for TLS 1.4 :P
Show threadCaitlinMay 14

@eloy I suspect harvest now, decrypt later is a fan of waiting for TLS 1.4 too. I can’t risk future governments looking at me doing squash merges of my dirty dirty “for real 2 final” commits.

(For real though I agree that the hacks are dirty)

Show threadEloy. 🔜 GPN24May 14

@mholiv I am not too worried about harvest now decrypt later style attacks. Storage is _expensive_ and a lot of secret data is only temporarily so, quite possibly useless for the attacker before they get a quantum computer. And you have to store much more than you'd want to extract in the end. And when it comes to web connections, a large part of the interesting bits are plain text metadata anyway.

But it all comes down to your own specific threat model in the end.