Hacker News new | ask | show | jobs
by yjftsjthsd-h 1859 days ago
Depends on how you mean "worse"; PGP is very secure with poor UX, SMS is less secure but honestly decent UX.
1 comments

Separating UX and "security" from a cryptosystem is impossible. Poor UX leads directly to security vulnerabilities.

Heck, we've seen that in library code: your AES implementation may be sound, but if the library interfaces make it easy to reuse an IV, or use a null IV[1], you have a broken cryptosystem.

[1]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5408