5 ms·
> SSL only handles the first two bullet points. Only the first point. If Google works like every other data center in the world, then SSL stops the moment your
by otabdeveloper1 10y ago
> SSL only handles the first two bullet points.
Only the first point. If Google works like every other data center in the world, then SSL stops the moment your data hits their first load balancer.
- themihai 10y agoMost datancenters are lost once the internal network is hacked so I think that's a different issue. Encryption wouldn't help either because the attacker could get the keys too.
- nevir 10y agoGoogle does not work like every other data center in the world. All internal services communicate over SSL (or similarly encrypted links)
- makomk 10y agoThough only because they discovered their internal unencrypted links were being systematically compromised on a truly massive scale for years.
- puzzle 10y agoFalse. There was already internal encrypted traffic and the revelations only sped up the migration for the rest. https://www.washingtonpost.com/business/technology/google-encrypts-data-amid-backlash-against-nsa-spying/2013/09/06/9acc3c20-1722-11e3-a2ec-b47e45e6f8ef_story.html https://www.washingtonpost.com/business/technology/google-en...
- themihai 10y agoI think the load-balancers do not communicate over SSL. At least not the ones in front of Appengine applications. Perhaps only inter-services communication is encrypted(i.e. app service with database service).