On Feb 18, 2013, at 5:43 AM, Peter Gutmann <pgut...@cs.auckland.ac.nz> wrote:

> Bodo Moeller <bmoel...@acm.org> writes:
> 
>> If you wonder why NSS would prefer Camellia over AES (I sure did), here's the
>> rationale. (Not a very good one, in my opinion -- if servers in certain
>> countries are expected to have a strong preference for certain ciphersuites,
>> those servers should override client preferences rather than hope that
>> clients list them at higher priority than AES.)
> 
> Another option is:
> 
> switch( locale )
>  case Japan: cipher = Camellia;
>  case Russia: cipher = GOST;
>  case Korea: cipher = SEED;
>  case France: cipher = JEAN_PAUL_GAULTIER; // Since we're making fashion 
> statements
>  ...
>  case Burkina_Faso: cipher = whatever;
> 
> This one would make more sense than forcing everyone to use Japan's vanity
> cipher.

I like this approach, although I would change "cipher" to 
"one_of_the_ciphers_offered" or maybe "first_cipher_offered", not the only 
cipher offered.

--Paul Hoffman
_______________________________________________
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography

Reply via email to