Signal's Post-Quantum PQXDH, Same-Origin Policy, E2EE in the Browser Revisted
About this episode
We're back! Signal rolled out a protocol change to be post-quantum resilient! Someone was caught intercepting Jabber TLS via certificate transparency! Was the same-origin policy in web browers just a dirty hack all along? Plus secure message format formalisms, and even more beating of the dead horse that is E2EE in the browser.
Transcript: https://securitycryptographywhatever.com/2023/11/07/PQXDH-etc
Links:
- https://zfnd.org/so-you-want-to-build-an-end-to-end-encrypted-web-app/
- https://github.com/superfly/macaroon
- https://cryspen.com/post/pqxdh/
- https://eprint.iacr.org/2023/1390.pdf
"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)
Get every episode summarized
Each time Security Cryptography Whatever publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Security Cryptography Whatever
Standardizing Pure PQC
Security Cryptography Whatever
Python Cryptography Breaks Up with OpenSSL with Paul Kehrer and Alex Gaynor
Security Cryptography Whatever
The IACR Can't Decrypt with Matt Bernhard
Security Cryptography Whatever
Apple’s Memory Integrity Enforcement
Security Cryptography Whatever