3 ms·

Seems like it would have unacceptable performance limitations.

• kerkeslager 10y ago
  That's your source of security? Performance limitations? I'm not even convinced it would have performance limitations. Let's say Alice and Bob are communicating and Eve has the BlueCoat device in the middle. Alice sends the initial connection request to Bob, but Eve gets it instead. Eve then sends a new initial request to Bob AND a request to the BlueCoat server to get the fake cert in parallel. As long as the BlueCoat server responds with similar latency to Bob, Alice won't see any significant difference in latency as compared to Eve simply forwarding the requests.
  • mikecb 10y ago
    I didn't say that at all.
    • kerkeslager 10y ago
      Okay, so what did you mean when you said, "Seems like it would have unacceptable performance limitations."