3 ms·
"nothing is worse off if it is encrypted" is a pretty big oversimplification. Layer 7 proxies and firewalls frequently use packet data to make more intelligent
by pawalt 7y ago
"nothing is worse off if it is encrypted" is a pretty big oversimplification. Layer 7 proxies and firewalls frequently use packet data to make more intelligent decisions about where to route packets, whether to drop packets, whether to modify packets, etc.
- falcor84 7y agoI don't see how this refutes the argument. These proxies and firewalls could just have a copy of the decryption key, no? (And if whoever is setting them up doesn't have access to the key, then they probably shouldn't be inspecting the packets anyway) I'd say that the bigger argument against "nothing is worse off if it is encrypted" is that this takes precious time.
- thayne 7y agonot to mention, that while encryption is cheaper than it was, it still isn't free. And managing certificates and CRLs, while much easier than it used to be is still not trivial, especially on an internal network or localhost.
- kevin_thibedeau 7y agoThese are the same agents that prevented SCTP from being usable outside of private networks. We need to stop catering for them.