cbarrick , 4 months ago

There’s a Wikipedia article on multiple encryption that talks about this, but the arguments are not that compelling to me.

The main thing is mostly about protecting your data from flawed implementations. Like, AES has not been broken theoretically, but a particular implementation may be broken. By stacking implementations from multiple vendors, you reduce the chance of being exposed by a vulnerability in one of them.

That’s way overkill for most businesses. That’s like nation state level paranoia.