XPost: alt.folklore.computers   
   From: invalid@invalid.invalid   
      
   Peter Flass  writes:   
   > On 12/29/25 00:52, c186282 wrote:   
   >> On 12/29/25 01:40, rbowman wrote:   
   >>> On Mon, 29 Dec 2025 01:17:50 -0500, c186282 wrote:   
      
   >>>> For most 'office' uses you do NOT need AES-256 encryption for yer   
   >>>> damned payroll or budget files. Nobody, not even Vlad or Xi, CARES.   
   >>>   
   >>> We were dealing with NPS sites like Yellowstone and Rocky Mountain. The   
   >>> Dept. of Interior certainly cares.   
   >> 'Interior' 99.5% doesn't NEED to care.   
   >> Who gives a fuck what some bubbling hole   
   >> in Yellowstone is doing ??? Forest replant   
   >> figures over some old strip mine ???   
   >   
   > The feds mandate encryption, and they probably don't differentiate   
   > among agencies.   
      
   AIUI the distinction is between National Security Systems (which must   
   use CNSA or suite A) and the rest (which must use FIPS-140).   
      
   FIPS-140, and other certification targets, are also relied upon outside   
   the US government. Very few organizations have the capability to fully   
   evaluate cryptographic products, and most of those that do have better   
   things to do. So, they use established certifications instead.   
      
   --   
   https://www.greenend.org.uk/rjk/   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)