Re: [saag] AD review of draft-iab-crypto-alg-agility-06

[Stephen Farrell <[e-mail]>]

On 27/07/15 22:06, Nico Williams wrote:
> There is no great difference for _one_ connection.  There is a great
> difference for _many_ connections.  I.e., even weak crypto makes
> pervasive eavesdropping significantly more expensive.

Well, I think there's still room for validly reaching different
conclusions about something like rc4 when we consider the various
parameters. (None of which we can really measure.)

Of course I fully agree with the OS approach, but I think we ought
recognise this wrinkle - there are going to be cases where it's
quite hard to do the evaluation of how to apply the OS design
pattern. 1DES is easy everywhere now, but rc4 for email is not
yet easy.

S.