2016.02.07 03:21:06 (696156703465848834) from Daniel J. Bernstein:
Pornin re SafeCurves: TLS uses ECC "in a rather simple and direct way where such risks don't apply." 8 months later: http://web-in-security.blogspot.com/2015/09/practical-invalid-curve-attacks.html