So, it seems we have a tag named security-analysis that is getting kind of indiscriminately applied to all sorts of "analyze my cipher / algorithm / protocol / implementation / etc." questions. Indeed, going just by the name, it could potentially apply to just about any question on this site, and the tag wiki isn't much more help:
"Security analysis is the examination and evaluation of the various factors affecting the value of a security solution and/or implementation. Many cryptographic algorithms undergo a multitude of security analysis to prove their security."
On one hand, given how vague the tag is, I'm tempted to suggest just nuking it. On the other hand, we do seem to have a few questions for which it is the most relevant tag, like:
- Is there a security analysis of CryptDB? and
- A situation where security by obscurity might be the best solution - or am I wrong?
On the gripping hand, it could be argued that those questions really belong on security.SE anyway.
So, what do you folks think? Is that tag useful, and if so, what should its proper scope be? Or should we just go through the 60 14 questions currently tagged with it, clean up the worst messes and then nuke it?