[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: TO COMPRESS OR NOT TO CMPRS (please reply)
Phil,
Just a minor correction: let's not refer to SSL or SSH as
"transport layer" security protocols. These protocols operate above the
transport layer. I'd call SSL a session layer security protocol, if I had
to attach a label. TLSP is an example of a transport layer security
protocol, i.e., it is integrated into the transport layer, not layered on
top. Also, one additional downside of session layer security protocols is
the possible dependence on the ordering provided by the transport layer
protocol. In the case of SSL, this means that an attack on TCP can quickly
kill the SSL session, requiring a new SSL session to be created, while TCP
thinks that everything is just fine...
Steve
Follow-Ups:
References: