ceejay
Joined 10 years ago
Joined 10 years ago
I haven't thought this through fully, but as far as I can tell ecosystems on the web evolve. And so I think it's probably a good idea that we architect things for the web in such a way that we don't inhibit that evolution. When you put a decision like encryption algorithm in the client's hands does it feel to anyone else that the security will evolve more rapidly, and thus remain more robust? When the client is deciding, there's a larger pool of people "voting" for what is an acceptable level of security. Even though a lot of those "votes" will be based on the default settings of a library, that library will over time become less popular as more and more people consider it unsafe.
By the same token, if a particular service (server-side) does not keep up with that evolution, fewer and fewer people will use it as other (safer) services pop up.
As far as I know there are no algorithms that exist today that we can guarantee will never be broken in the future. So algorithm choice inherently must be decoupled from the specification.
EDIT: Or a naive server implementation for that matter...
Sure you could read a study to get the same information, but unless your own data screams to you what the problem is it's not always easy to convince folks you should be doing anything about it.
Not just the "matrix" flavor where the goal is to learn specific skills. I'm talking about being born, growing old, and dying in a simulation many times in a matter of hours? / days? / weeks? and being able to recall those experiences / decisions and their rewards and/or consequences once you're back to living your "real" life.
Especially obvious when that lack of discipline helps shape the foundation of one's thoughts on a topic.