3 ms·
That’s simply not true. I can tell you for a fact basically every Fortune 500 is doing SSL inspection on at least a portion of their traffic. As for things lik
by tw04 3y ago
That’s simply not true. I can tell you for a fact basically every Fortune 500 is doing SSL inspection on at least a portion of their traffic.
As for things like HIPPA - that’s why you do URL categorization and bypass those destinations.
- fnordpiglet 3y agoI can tell you for a fact, having worked at them in a senior executive technical role with responsibility for security, that at least the top banks do not do this, and definitely not tech giants like Amazon. I am certain others do - but this doesn’t make it a good idea. There are a lot of bone headed things that networking hardware companies convince deep pocketed customers to do that they shouldn’t. Creating the ability to intercept traffic means none of your communications are secure within their TLS tunnels because there exists a well known and discoverable single point of failure for literally all traffic in the network. Finally URL categorization isn’t perfect, and you end up with a leaky solution that is again, as I said, a giant cess pit of regulatory toxic waste.
- parasubvert 3y agoSeveral top banks ($20b revenue +) I've contracted at internationally do MITM most of their TLS traffic to the internet, either via transparent gateway or http proxy. As do top manufacturers, insurance companies, government agencies, etc. It is probably 60/40 MITM vs not in my experience. It's a pain.