The protection offered by TLS in a TOFU scheme

[Petite Abeille]

> On Mar 5, 2021, at 11:30, Björn Wärmedal <bjorn.warmedal at gmail.com> wrote:
> 
> There's something alluringly simple about proclaiming that "F it, TLS is just
> security theatre anyway!" and skipping it altogether. 

Security theatre! 

You will find a kindred spirit in Bruce Schneier — of Applied Cryptography fame.

https://www.schneier.com/essays/archives/2009/11/beyond_security_thea.html
https://en.wikipedia.org/wiki/Security_theater

While the above essay focuses on [ physical | political | societal ] security, the exact same dynamics apply to digital systems.

±0¢