'#TLS, the workhorse for today’s “Internet #security”, provides “security” only if all of 100s of certificate authorities operate correctly (which they usually do !not), and it comes with a large set of supported #cryptographic primitives, most of which are known to be #insecure.' cc @question
@question Can lower layer changes (e.g., to IPv6) help? Can you deploy end-to-end crypto? How do you reconcile caching with end-to-end encryption? Can you deploy other applications so that you mitigate monitoring?
