The two key issues PQC try to address are key exchange and digital signature, which happen during TLS handshake, the mechanism you described happen after TLS is established; so if a quantum computer breaks TLS, then it effectively reduced HTTPS to HTTP
k8s is simple because it offload some key tasks to 3rd party like network and storage; it is not easy to: a) setup and maintain a k8s cluster with all necessary components from at least a dozen different sources b) design your application to be k8s native
> Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f*d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it, and can’t be relied upon.
compare to SGX, a more critical impacted component is TPM chip, secured/measured boot depends on TPM, and cost of replacing all servers and OS ...
yes, and I think one big reason enterprise might not buy your product even if it is guaranteed to make/save $X is $ is often NOT most important thing to the people make buying decision, specially when it is not your own money to save or gain
one thing I liked about cobra is the auto complete support, but I don't like the manual process of define command and parameter and not easy to extend, so I wrote https://github.com/hujun-open/myflags, it is built-on top of cobra but allow uses a struct to define all commands/args and also easily to extend support new types (even existing types)
one thing I agree that software/standard people like to churn, churn is a source of new income regardless if QC could break RSA or not in the future, people could make profit now
one tip of the list I can't agree more is the www.seat61.com for train ticket, especially if you travel in Europe, where train is the most convenient way to travel between cities/nations but man is it such complex system, there are so many different rail companies and lines, this website gives a clear instruction on options, price and where to buy the ticket
Fact: TikTok’s parent company ByteDance Ltd. was founded by Chinese entrepreneurs, but today, roughly sixty percent of the company is beneficially owned by global institutional investors such as Carlyle Group, General Atlantic, and Susquehanna International Group. An additional twenty percent of the company is owned by ByteDance employees around the world, including nearly seven thousand Americans. The remaining twenty percent is owned by the company’s founder, who is a private individual and is not part of any state or government entity.
```
all network devices that terminates a subscriber (broadband or mobile) has a feature called LI: https://en.wikipedia.org/wiki/Lawful_interception, which is required by law in almost all countries
one requirement is that operation of LI feature is totally separate from normal network operator, so that even normal network admin are not supposed to know what kind of LI operation is ongoing...
depends on how much "k8s native" code you have, there are application designed to run on k8s which uses a lot of k8s api
and also if you app already micro-serviced, it is also not straight forward to change it back