曳尾于涂 @Acer@social.cleverlibre.org

我为什么要熬夜。因为白天太聒噪了，深夜过滤了人声和人味之后能让我意识到：我好像是在活着的

@categorille https://tools.ietf.org/html/draft-wang-tls-raw-public-key-with-ibc-13

#TIL China has a national standard, SM9, on Identity-Based Cryptography. IBC is a cool cryptosystem, there's a math connection between your public key and your name (username, domain name, etc), so everyone can use your name as the public key without any authorities or key servers, nevertheless its traditional form has a huge technical limitation - it requires a Key Generation Center to generate your private keys. "All your key are belong to us!"

There's an RFC draft to include it in TLS, and see how the backdoor is justified... Man-in-the-Middle attacks can be detected by forensic analysis, are you kidding me?

To be fair, the CA PKI system has the same backdoor - in both systems the authorities can pretend to be anyone, if you use the key strictly for signing, not encryption, arguably IBC is not worse than PKI.

But at least a CA leaves an auditable record if you enforce Certificate Transparency requirements. Meanwhile IBC KGC can do the same without leaving a trace. #cryptography

和我妈视频时才想起来自己在台湾还给画廊打过黑工aka无证带薪自习。回鳖精后牌子越大工作越忙的艺术机构越没可能给实习生发工资…