nanog mailing list archives
Re: [EXTERNAL] Re: Flow collection and analysis
From: Mel Beckman <mel () beckman org>
Date: Wed, 26 Jan 2022 15:33:58 +0000
People who advocate TLS lash-ups like nginx front ends remind me of Mr. Beans DIY automobile security, which started with a screwed-on metal hasp and padlock, and then continued to a range of additional “layers”. Not “defense-in-depth”, merely unwarranted “complexity-in-depth”: https://youtu.be/CCl_KxGLgOA TLS is a standardized, fully open-source package that can be integrated into even tiny IoT devices (witness this $10 WiFi module https://www.adafruit.com/product/4201<https://www.adafruit.com/product/4201>). The argument that people who want intrinsically secure products can just bolt-on their own security are missing the point entirely. Every web-enabled product should be required to implement TLS and then let custiners decide when they want to enable it. Vendors who are so weak that they can’t should have their products go straight into /dev/null. -mel via cell On Jan 26, 2022, at 6:51 AM, heasley <heas () shrubbery net> wrote: Wed, Jan 26, 2022 at 07:21:19AM -0600, Mike Hammett: Why is it [TLS] even necessary for such a function? confidentiality and integrity, even if you do not care about authentication. I am surprised that question is asked. The fewer things that are left unprotected, the better for everyone. those with concern about erosion of their privacy and human rights benefit from everything being protected, everywhere for everyone.
Current thread:
- Re: Flow collection and analysis, (continued)
- Re: Flow collection and analysis Pierre LANCASTRE (Jan 25)
- Re: Flow collection and analysis Laura Smith via NANOG (Jan 25)
- Re: Flow collection and analysis Christopher Morrow (Jan 25)
- Re: Flow collection and analysis David Bass (Jan 25)
- Re: [EXTERNAL] Re: Flow collection and analysis Compton, Rich A (Jan 25)
- Re: [EXTERNAL] Re: Flow collection and analysis Laura Smith via NANOG (Jan 25)
- Re: [EXTERNAL] Re: Flow collection and analysis Eric Kuhnke (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Laura Smith via NANOG (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Mike Hammett (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis heasley (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Mel Beckman (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Nick Suan via NANOG (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Mel Beckman (Jan 26)
- Re: [EXTERNAL] Re: Flow collection and analysis Eric Kuhnke (Jan 27)
- Re: [EXTERNAL] Re: Flow collection and analysis Mel Beckman (Jan 27)
- Re: [EXTERNAL] Re: Flow collection and analysis Laura Smith via NANOG (Jan 28)
- RE: [EXTERNAL] Re: Flow collection and analysis Jean St-Laurent via NANOG (Jan 28)
- Re: [EXTERNAL] Re: Flow collection and analysis Marcel Mitsuto (Jan 28)
- Re: Flow collection and analysis David Bass (Jan 25)
- Message not available
- RE: [EXTERNAL] Re: Flow collection and analysis Laura Smith via NANOG (Jan 28)
- Re: [EXTERNAL] Re: Flow collection and analysis Laura Smith via NANOG (Jan 28)
- Re: [EXTERNAL] Re: Flow collection and analysis Chris Adams (Jan 26)