logoalt Hacker News

InsidiousWombat • today at 1:30 PM • 1 reply • view on HN

theoretical model means that the transfer method doesn't matter.

Of course, that breaks if implementation checks the signatures in wrong moment


Replies

vesinisa • today at 1:46 PM

There have already been quite a few vulnerabilities in the implementation that would have been avoided if the transport itself was simply protected in line with the industry standard practice of using TLS by default.

➕ show 1 reply