[Info-vax] FTP FYI

[Stephen Hoffman]

On 2020-11-25 14:46:00 +0000, Dave Froble said:

> Perhaps we should be a bit more focused on the issue?
> 
>  From what I was reading, the issue was catching data corruptions, not 
> security.  Isn't it sort of silly to introduce security into another 
> issue?  A checksum either works, or it doesn't.  If it works, doesn't 
> that solve the potential issue?
> 
> Or maybe I don't understand the issue ...

OpenVMS is "the most secure operating system on the planet" 🤣, which 
means that vendor and third-party developers have thought about both 
non-malicious corruptions and about actively-malicious corruptions, 
right?

Same applies for the default choice for random-number generation: use a 
cryptographically secure random number generator, absent very specific 
reasons to use a lesser generator. Or a lesser message digest hash.

Or somewhat more succinctly, choose and use and offer and work toward 
secure defaults, absent specific reasons not to.

We are all working toward actually living up to that "the most secure 
operating system on the planet" claim, right?



-- 
Pure Personal Opinion | HoffmanLabs LLC