3 ms·

The local busybody - how are they attacking you? On WiFi or arp poisoning scenarios, they can MitM with the same setup they're already using. If there was a bi

The local busybody - how are they attacking you? On WiFi or arp poisoning scenarios, they can MitM with the same setup they're already using. If there was a big shift to encryption without verification, passive attacks could just start shifting to active ones. In most cases they're in place to do so. I suppose the major exception is optical splitter scenarios. But what's stopping them from replacing the splitter with another hop?

pdkl95 12y ago
> If there was a big shift to encryption without verification Shift from WHAT? Remember, nobody is suggesting shifting anything from proper encryption, or changing the UI in any way that might mislead a user into thinking they were using a "secure" connection. This is a replacement for plaintext only. > But what's stopping them from replacing the splitter with another hop? Cost and complexity. Which is to say, if anybody really wants to throw a few megabucks at the problem, they will succeed, but that is not a contingency that some threat models worry about. I will refer to Dan Geer when he said[1] (and I suggest this is true for the corporation as well as government): The central dynamic internal to government is, and always has been, that the only way ... to control the many sub-units of government is by way of how much money [it] can hand out. ... Suppose, however, that surveillance becomes too cheap to meter, that is to say too cheap to limit through budgetary processes. This is what technology has done for the surveillance of plaintext. The marginal cost of recording "everybody"[2] went form about 1:1 in man-hours to practically free, largely because it is possible to log all the plaintext you want to disk, to be processed as needed (or to data mine). By raising the cost at all, we might be moving at least some types of eavesdropping back from "too cheap to limit". Make the eavesdropper work for it, instead of simply folding because they might decide to upgrade to a MitM. An even better question, though, is why are you so interested in keeping the internet in plaintext? [1] http://geer.tinho.net/geer.blackhat.6viii14.txt http://geer.tinho.net/geer.blackhat.6viii14.txt [2] for whatever definition of "everybody" you prefer
- MichaelGG 12y ago
  Some proposals were to warn about HTTP without OE, and then display the current HTTP plaintext UI for HTTP with OE. So long as there's no distinction to the end user UI so plaintext looks as good as OE, then I'm all for it.

pdkl95 12y ago

> If there was a big shift to encryption without verification Shift from WHAT? Remember, nobody is suggesting shifting anything from proper encryption, or changing the UI in any way that might mislead a user into thinking they were using a "secure" connection. This is a replacement for plaintext only. > But what's stopping them from replacing the splitter with another hop? Cost and complexity. Which is to say, if anybody really wants to throw a few megabucks at the problem, they will succeed, but that is not a contingency that some threat models worry about. I will refer to Dan Geer when he said[1] (and I suggest this is true for the corporation as well as government): The central dynamic internal to government is, and always has been, that the only way ... to control the many sub-units of government is by way of how much money [it] can hand out. ... Suppose, however, that surveillance becomes too cheap to meter, that is to say too cheap to limit through budgetary processes. This is what technology has done for the surveillance of plaintext. The marginal cost of recording "everybody"[2] went form about 1:1 in man-hours to practically free, largely because it is possible to log all the plaintext you want to disk, to be processed as needed (or to data mine). By raising the cost at all, we might be moving at least some types of eavesdropping back from "too cheap to limit". Make the eavesdropper work for it, instead of simply folding because they might decide to upgrade to a MitM. An even better question, though, is why are you so interested in keeping the internet in plaintext? [1] http://geer.tinho.net/geer.blackhat.6viii14.txt http://geer.tinho.net/geer.blackhat.6viii14.txt [2] for whatever definition of "everybody" you prefer

MichaelGG 12y ago
Some proposals were to warn about HTTP without OE, and then display the current HTTP plaintext UI for HTTP with OE. So long as there's no distinction to the end user UI so plaintext looks as good as OE, then I'm all for it.