3 ms·
> 90% of the time the desirable quality of TLS traffic is authentication of the server, not encryption. Authentication of the server is not sufficient, you als
by hurin 12y ago
> 90% of the time the desirable quality of TLS traffic is authentication of the server, not encryption.
Authentication of the server is not sufficient, you also have to authenticate every message as having a valid checksum and signature.
>Typical use case: software updates distributed as signed packages
This is a specific use-case because the package checksums are verified before any of the code is executed (unlike injected javascript to webpages). Also the checksum is usually obtained from the package server, so if SSL is broken the checksum can be spoofed as well.
- Pyxl101 12y ago> encryption is necessary for there to be any meaning to authentication. Could you elaborate on why that is the case? Do you perhaps mean cryptography rather than encryption?
- hurin 12y ago> Do you perhaps mean "cryptography" rather than "encryption"? That's true the poster said authentication of the server, if you sign every message cryptographically, you'll be able to detect message tampering. I should edit that.
- brohee 12y agoYou know you can use MAC and a NULL cipher right? Even in IPsec there is a whole mode, AH where messages are authenticated but not encrypted...