Subject: Re: Transparency in Specifications and PRISM-class attacks

From: [email-masked] (Noel Chiappa)
Date: Fri, 20 Sep 2013 13:42:47 -0400 (EDT)

> From: Hannes Tschofenig <[email-masked]>

    > * Prefer performance over privacy in protocol designs

You forgot:

    * Prefer privacy over performance in protocol designs

and its cousin:

    * Prefer privacy over usability in protocol designs

both of which, as we have seen extensively over the last couple of decades,
can lead to people tossing privacy, and running in non-private mode...

And of course both of these (and probably others in your list) can happen
through simple human error, not necessarily ill intent. ("Never attribute to
malice that which", etc.)

The Truth Path to good, effective privacy is a narrow one, I fear.

	Noel