On: NIST Privacy Framework

[djha-skin]

Does anyone really still trust these guys after the revelations of the last decade? Seems to me they had their fingers in a lot of pies.

[AndrewKemendo → djha-skin]

Can you point to some specific complaints of wrongdoing?

NIST generally doesn’t have any “power” that they can abuse - unless you consider any standards organization an abuse of sovereignty or some such

[fintler → AndrewKemendo]

It's not exactly recent, but Dual_EC_DRGB wasn't handled well.

(pdf) https://harvardnsj.org/wp-content/uploads/2022/06/Vol13Iss2_...

[MattPalmer1086 → fintler]

No, that wasn't handled well and it damaged them. The NSA were the ones who backdoored it though, and NIST ignored warnings of a possible back door.

However, in general NIST standards are very good.

[AndrewKemendo → fintler]

Which was rescended…so I’m not sure what the complaint is

This is about as good as it gets for any organization