3 ms·
And that's where we run into problems. How do we make it so that You can decrypt the traffic from your devices, but random hackers, your ISP, the NSA, etc can't
by ufmace 10y ago
And that's where we run into problems. How do we make it so that You can decrypt the traffic from your devices, but random hackers, your ISP, the NSA, etc can't? It's the same arguments against special decryption keys for the Government - a backdoor for one entity can be exploited by other entities.
- userbinator 10y agoHow do we make it so that You can decrypt the traffic from your devices, but random hackers, your ISP, the NSA, etc can't? The suggestion made at https://news.ycombinator.com/item?id=13303650 https://news.ycombinator.com/item?id=13303650 of terminating TLS at the border addresses this --- traffic on the public Internet is encrypted, but is decrypted in the private local network. In some ways it is similar to a VPN. I run a filtering/adblocking proxy that works in the same way.
- ethbro 10y agoAny pointers on what the encapsulation for that would look like? It seems like one good option, but I'd say it's only feasible if it doesn't require work on the part of the manufacturer. My other thought was just mandating a method of loading CA certs onto all IoT devices using an open standard connector. If the owner so chooses.