[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: TO COMPRESS OR NOT TO CMPRS (please reply)




Phil Karn writes:
> I used the term "transport layer security" to refer to SSL and SSH
> because that's the term in common IETF usage. Perhaps we should rename
> them to "presentation layer security", because that's what it really
> is. And the Internet may even have a true presentation layer for the
> first time. :-)
> 
> Your other point about being able to sabotage TCP connections when the
> security is layered on top is also quite true. It all depends on your threat
> model -- are you more worried about active attacks or passive eavesdropping?

One has to worry about both in certain circumstances. The most
canonical example is, of course, disrupting BGP connections between
routers.

Perry