3 ms·
Simple. TLS ensures data integrity and protects it from eavesdropping. Here is a conversation between Alice and Bob: Alice <-TLS-> Bob In this scheme, only Al
by garganzol 7y ago
Simple. TLS ensures data integrity and protects it from eavesdropping. Here is a conversation between Alice and Bob:
Alice <-TLS-> Bob
In this scheme, only Alice and Bob can know the details of a conversation.
Another conversation with Kevin reveals another scheme:
Kevin <-TLS-> Bob
See the pattern? Both Alice and Kevin shared their information with Bob.
Now imagine that Bob is a Big Co. And it has hundreds of millions conversations every day.
In this way, Bob is able to gather big data about all the persons he ever talked to. And because TLS only protects data in transit, Bob now has the privilege of an exclusive access to the gathered data en masse. No other person in the world would be able to access it as Bob claims a total ownership on it.
What Bob would do with data? It's an open question.
One scenario is to build a graph of relations between the persons and then target them with ads. Another scenario is to target all the persons who ever dared to show signs of non-conformity and disagreement and put them to jail.
The possibilities are endless and nobody would be able to prove anything because TLS helped Bob to deter all the eavesdroppers. And now he has the ultimate power to rule the world.
- StavrosK 7y agoOh I see, so you believe random third parties like your ISP and whoever runs the routers reading your passwords and data in transit is a good thing?
- garganzol 7y agoPasswords/control panels should be secure from eavesdropping. TLS perfectly covers this as for now. In order to keep the society from diverging into rampant monopolization and totalitarization, I would propose a modification to TLS that would allow to optionally turn off encryption while preserving data integrity guarantees. News outlets/public resources/Youtube and the whole society would all benefit from using such form of TLS.
- ignaloidas 7y agoSo you think that it is better to everyone to know everyone's conversations rather than everyone to know just their conversations, because someone could have more conversations and that is not fair. Now that is actually dangerous, because if someone wants to misuse your data, you'd rather them have only your conversation to them, not your conversations to everyone.
- cytzol 7y ago> In order to keep the society from diverging into rampant monopolization and totalitarization, I would propose a modification to TLS that would allow to optionally turn off encryption while preserving data integrity guarantees. You can already use TLS with the null cypher to get the data integrity guarantees you want. Apparently Microsoft (back in 2016) did this to for Windows Update: https://twitter.com/SwiftOnSecurity/status/745333018697469953 https://twitter.com/SwiftOnSecurity/status/74533301869746995...
- Dylan16807 7y agoIn general it's only the large and powerful organizations that have the ability to eavesdrop in the first place! Removing the encryption doesn't help anyone directly. I'm pretty sure you can publish your TLS transcripts, too. This ensures that when you want to share this data with someone they'll actually get it, and allows you to keep it private when you want.