3 ms·

MITM introduces significant delays, yet another single point of failure, adds significant risk of leakage. Current DPI are passive, so they have no such problem

by lisivka 10y ago

MITM introduces significant delays, yet another single point of failure, adds significant risk of leakage. Current DPI are passive, so they have no such problems.

ivan_gammel 10y ago
It's technical problem, that can be solved. Dedicated hardware optimized for MITM, probably.
- bchociej 10y ago
  It's already in use, in fact.
  - ChoHag 10y ago
    Who'd have thought banks would look for ways to save money? Madness!
anonymousDan 10y ago
Could you elaborate a bit on what kind of passive DPI you can usefully do on an encrypted TLS session? Do you mean something like this? https://arxiv.org/pdf/1607.01639v1.pdf https://arxiv.org/pdf/1607.01639v1.pdf
kijin 10y ago
Deliberately weakening encryption also adds significant risk of leakage, this time on a global scale.
bchociej 10y ago
There are absolutely "bump-in-the-wire" intrusion prevention systems with MITM capability.