when will it matter?
Protocol design? (Nah, that’s an application problem)
Application design? (We plan to add that in the future...)
Application deployment? (Let’s get it running first)
System administration? (I’m putting out fires every day!)
Some systems and/or protocols are designed with security
in mind from the beginning -- maybe even as their primary
design goal. But for most? The story’s the same…