4 ms·
...and in this context they aren't compromising it. They're just sharing their keys so that another component, all part of the same trusted system, can also dec
by cbsmith 8y ago
...and in this context they aren't compromising it. They're just sharing their keys so that another component, all part of the same trusted system, can also decrypt the traffic.
- cesarb 8y agoSharing the key allows more than just decryption; it also allows undetectable modification of the traffic. A protocol which allowed third-party decryption but not modification would have been designed differently.
- cbsmith 8y agoIn this case the key is used by a system that is reading a log of the archived traffic. It has no direct network connectivity to the production traffic. I think we can safely say it isn't modifying the traffic... in fact, that's a requirement for the security apparatus.