Overconfident developers that choose to write their own cryptography code have plagued the information security industry since before it was even an industry. This in and of itself isn’t inherently a bad thing, despite the infosec truisms about never doing exactly that. Writing crypto code (but not deploying or publishing it!) is an important first step to understanding the algorithms. One trend I’ve noticed (as I recently noted about Session) is developers incorrectly insisting that they aren’t...