@icedquinn Indeed, educate people on good passwords, and using 2fa (which for me is a pain) but if it was a job requirement, employer can provide the phone for it.

But there are alternatives such as Yubi keys (or something) smart cards etc.

So long as we have clueless managers in charge we are doomed.

@zleap those are nice things but we have real problems like TCP is brittle as shit.

@zleap the finance industry has been toying with a system called SCION which replaces much of the network stack. it ensures every packet is subject to encryption/signing (ECC crypto is cheap) and basically when computers go to connect they propose the route they intend packets to take and the autonomous system approves it by signing the route and then packets are checked and forwarded based on that.

it makes it possible to do something like say, not route any of your traffic through a particular hostile nation.

@zleap right now basically nothing has security on it and it's hackneyed on in other places. china can and has stolen all the global traffic for 30 minutes at a time.

having good passwords is cool and all but we need to fix shit so random governments can't assume packet routing for an hour and slip their root CAs in place.

@icedquinn

Sounds good, we need a full rewrite of everything I guess.

kinda makes me think we need web4.0, using say different ports (secure only) min size cert keys say 2048 bit or higher,. and rebuild everything better.

@zleap 2048-bit ECC is massive

really people need to stop using RSA.

@icedquinn Ah ok, I was just guessing here.

I try and use OpenGPG but very few people use it, i am ok signing e-mails, it just seems to confuse people who try and open the .asc file.