Filippo is my favorite way to keep myself abreast of the newest (professionally relevant!) drama in the cryptography community. Excellent post as always.

Okay - so... they're saying... don't use p384? :3

As far as I know, P384 has never been a “right answer.”

Hurray for mostly-non-controversial opinions!

Meh don't care about the actual PQ parts. I'm with Peter Gutmann [0] in that PQ is just a waste of time and draining resources that could be put to better use.

[0] https://www.youtube.com/watch?v=xa4Ok7WNFHY

> Password handling: Argon2id or scrypt. But have you considered passkeys instead?

I hate passkeys and if your service doesn't offer an alternative then I'm not using your service.

Why can't I use rclone?

rclone isn't a backup tool, it's a file transfer tool

Never heard of rclone but probably not a Cryptographic right answer because encryption isn't always on.