10 points iamsyr 1 hour ago 2 comments
lucaprata 23 minutes ago | parent
We had a probe that checked whether a connection was using post-quantum cryptography. It looked for "Cipher is" in the output. But when the handshake failed, it would print "Cipher is (NONE)." So it reported that github.com and amazon.com were compliant. For weeks.
The success criterion was embedded in the errorline.
chrismorgan 13 minutes ago | parent
Genuine question: why wouldn’t they have been doing this already? It feels like obvious low-hanging fruit on a critical path, so I presume there’s something more to it than I’m imagining.