[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: swIPe stuff
...... Not calling for crypto for confidentialtiy
> where crypto for authentication and integrity will suffice facillitates
> interoperable, international communication.
>
> In terms of integrity checks, my point was that strong checks,
> e.g., hashes, are really required. This is not what we put in non-
> security protocols, and so use of encryption without security-
> oriented integrity checks is dangerous. Use of the integrity checks
> alone is a good approach for circumstances where confidentiality is
> not required.
Do you contend that remote login is such a case? To add to the list
of people "helping" Phil to define his point, a fully-encrypted tunnel
rlogin provides an easy-to-grasp level of security.
One can then read mail without outside observers.
One can then download and upload files without exposure.
One can use the tunneled-to firewall to allow further logins with
passwords in the clear but no exposure outside the firewall.
Integrity, authentication, and the rest are all nice adjuncts, but are
aimed at attacks that are active, and hence more detectable.
Its hard to avoid the impression that attempts to sell users on
various types of security without privacy on technical grounds are
really trojan horses for policy issues.
paul
Follow-Ups: