[skrebbel]

> but perhaps you can use the search bar below to find a debate about JS crypto where it was missing and where the result was misleading to readers.

Oh come on, was that sneer called for? If you really feel that none of the security discussions here on HN are getting way out of hand over what's really a misunderstanding on some basic assumptions, then you haven't been looking. Note, I didn't say "JS crypto discussions", I said "security discussions".

In fact, I'm mostly referring to the kinds of discussions that did not start as a security topic, but evolved into them. There, there's often people like me, who care about security but who are far from experts, and these people (myself included) often mix stuff up. Clearing out definitions and which threat model to assume would really help in such discussions. I thought that this blog post did that in a very clear and non-opinionated way in that little paragraph there, so I complimented it.

Is that really so bad?

[tptacek]

I'm not sure what controversy you think you're wading into here, or why you think I was sneering. I was being completely serious.