Re: DEFcon

On 3 July 2015 at 21:58, Manu Sporny <msporny@digitalbazaar.com> wrote:

> On 06/30/2015 04:21 PM, Brent Shambaugh wrote:
> > I know you all know a lot, but it bothers me that the people doing
> > the work tend to be the same people and it is small in number.
>
> It's a problem of time and funding, not interest.
>
> Many of us are not going because we're really busy and it costs a lot of
> time and money to go to those sorts of things. That time, at least right
> now, is better spent building prototypes and writing specs.
>
> That doesn't mean there won't be ample security review of what we're
> building in time, it's just that it takes time to build the momentum to
> get there.
>
> In the meantime, what you may not see is us taking part in other groups
> like the Web Security IG, Cryptography Forum Research Group, and reading
> security research papers and specs as they come out of IETF.
>
> We're not turning a blind eye to this stuff; DEFcon is neat, but it's
> not what we need right now.
>

+1

I think the attention to security to date has been set a really high bar.
It's always possible to do more, but there's diminishing returns with
limited resources.


>
> -- manu
>
> --
> Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
> Founder/CEO - Digital Bazaar, Inc.
> blog: Web Payments: The Architect, the Sage, and the Moral Voice
> https://manu.sporny.org/2015/payments-collaboration/
>
>