logoalt Hacker News

crotetoday at 12:43 PM1 replyview on HN

How does that guarantee anything? I could definitely see it being better, but that doesn't make violating it impossible does it? Just... statistically less likely.


Replies

brooksttoday at 12:49 PM

Looked at that way, there are no security guarantees anywhere. Root CA’s can be compromised, cosmic rays can flip bits, zero days can appear in your supply chain.

Perhaps “ensure to a level ~six orders of magnitude better than current practices” would be a better way to say it.