On: Don’t Rush Quantum-Proof Encryption, Warns NSA Research Director

[morelisp]

If that TLS 1.0 device had never needed to support RC4 in TLS to begin with, which practically speaking it never really needed to, we could've done less work at implementation time, provided clearer guidance to users when the vulnerabilities were discovered, and likely had fewer affected users to begin with.

[throw0101a → morelisp]

> If that TLS 1.0 device had never needed to support RC4 in TLS to begin with, which practically speaking it never really needed to ...

Except that we did not know about not needing to. When BEAST came out a lot of recommendations said to switch over to RC4:

* https://en.wikipedia.org/wiki/Transport_Layer_Security#BEAST...