3 ms·
IMO the plaintext part isn't a real issue. With the recent dramatic increase in https usage it won't have much impact. I'd also consider that segment "comprimi
by penagwin 8y ago
IMO the plaintext part isn't a real issue. With the recent dramatic increase in https usage it won't have much impact.
I'd also consider that segment "comprimised" anyway, from a security perspective anything past my modem could be MITM'ing my connecting.
- loeg 8y agoYeah, I totally agree; at the end of the day end-to-end authenticated encryption is the way to go. But not everything is end-to-end encrypted, so it's worth mentioning as a caveat. It sounds like I may be mistaken anyways and some GPON networks negotiate an AES key for downstream traffic, but I have no way to confirm that this design or implementation is secure, or that in practice CenturyLink even uses it on my local fiber.