Hacker News new | past | comments | ask | show | jobs | submit login

Let's just all use ( http://nacl.cr.yp.to/ ) and stop arguing.



NaCL is awesome and simplifies many things, but it's not a protocol, so we can't stop arguing :( Example questions: how to do user authentication, should I use random nonce or a counter for this particular project, what happens when the nonce is reused (does it break my MAC, encryption, or both), how do I distribute public keys, etc.


Most of these questions can be solved by a little "cookbook" that maps these use cases onto pieces of NaCl (and maybe scrypt). I understand we could then argue over the cookbook (though I don't know in practice how much we would), but it's nice that we're arriving at a place where the libraries are high-level enough that it's somewhat hard to screw it up with just a little bit of guidance.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: