RE: Feedback for mixminion specs

["Lucky Green" <shamrock@cypherpunks.to>]

George wrote:
> 2) SSL/TLS
> 
> Early in the design we have decided to go for SSL/TLS instead 
> of designing 
> our own forward secure channel. Was this wise?

Extremely wise. Getting secure transport protocols to be secure is a
challenge even for the best of cryptographers and even that crowd rarely
gets it right on the first or even second try. TLS has seen years of
review - and countless failures - before getting into the state in which
it is today: trusted more than other such protocols, though a far cry
from being fully trusted. Which is why the best cryptographers will
typically give application authors the following advice: unless there is
a sound reason why TLS does not meet your requirements (please explain
in exhaustive detail), don't give in to the temptation of designing your
own transport security protocol. Or if you design it, resist the
temptation to deploy it. :)

Just my $0.02,
--Lucky