FlashFXP Forums - View Single Post

OngL · 08-06-2004, 02:30 AM

Hi Maxxcon,

Thanks for your feedbacks... I'm not trying to imply that security/algorhytm is not good in FFXP, nor do I want to assume it is good without knowing the fact.

I just don't believe security by obscurity. There are many programs out there that functions as PIM/wallet to encrypt your personal information e.g. PIN, CC number etc. They failed to mention or assure consumer their encryption strengh (by key size and algorhytm). By not mentioning the information, security-consious people ( they are growing day by day) wouldn't look at such products.

At any case, I don't see the harm of stating 'Our products uses xxxx encryption with xxx key size'. So when there is a vulnerabilities discovered in the algo, people can quickly notify support or keep cautious.... Not knowing, of course, fatal.

08-06-2004, 02:30 AM
OngL Member Join Date: Aug 2004 Posts: 51	Hi Maxxcon, Thanks for your feedbacks... I'm not trying to imply that security/algorhytm is not good in FFXP, nor do I want to assume it is good without knowing the fact. I just don't believe security by obscurity. There are many programs out there that functions as PIM/wallet to encrypt your personal information e.g. PIN, CC number etc. They failed to mention or assure consumer their encryption strengh (by key size and algorhytm). By not mentioning the information, security-consious people ( they are growing day by day) wouldn't look at such products. At any case, I don't see the harm of stating 'Our products uses xxxx encryption with xxx key size'. So when there is a vulnerabilities discovered in the algo, people can quickly notify support or keep cautious.... Not knowing, of course, fatal.