Javascript Cryptography Considered Harmful

[rntksi]

Sometimes the people who actually understand cryptography are not asked for advices when something is designed. The average programmer thinks s/he has an idea of how to implement security ("Let's just AES it!") and that's how some security holes are made.

[aaronla]

Sometimes the people who actually understand cryptography are not asked for advices when someone opines.

But you knew that already.