W3C home > Mailing lists > Public > public-webappsec@w3.org > July 2019

Re: [public-webappsec] <none>

From: Daniel Veditz <dveditz@mozilla.com>
Date: Wed, 24 Jul 2019 17:44:02 -0700
Message-ID: <CADYDTCAtob8jmX5_FDibRz=GdzcuXv_J2TPi3Y-xq2GBUhTKTg@mail.gmail.com>
To: Craig Francis <craig.francis@gmail.com>
Cc: Web Application Security Working Group <public-webappsec@w3.org>
On Wed, Jul 24, 2019 at 3:55 AM Craig Francis <craig.francis@gmail.com>

> But whenever I mention the word "nonce" [...] sometimes they wonder why
> paedophiles are relevant

Ugh -- been in the spec for years and this is the first time I've heard of
this unfortunate slang meaning. I'll take comfort in the fact that crypto
use of "nonce" is almost certainly inspired by the phrase "for the nonce"
for which the OED has citations going back to the 1200s. I don't buy
"Number used ONCE" as the real origin, not for something that's such an old
legit word that just happens to have essentially the same meaning. The
slang meaning seems to have come from the 1970s. A couple of places are
trying to sell it as a prison guard acronym for paedophiles likely to get
beaten up ("Not On Normal Communal Excercise") but that sounds more like a
backcronym to me; a shortened form of "Nancy boy" seems more likely.

-Dan Veditz
Received on Thursday, 25 July 2019 00:44:38 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:55:07 UTC