Re:QUIC – Will It Replace TCP/IP?
by pawalt on Thursday April 02, 2020 @03:09PM
(#22762443)
"nothing is worse off if it is encrypted" is a pretty big oversimplification. Layer 7 proxies and firewalls frequently use packet data to make more intelligent decisions about where to route packets, whether to drop packets, whether to modify packets, etc.
[ Parent
| on HN ]
Re:QUIC – Will It Replace TCP/IP?
by kevin_thibedeau on Thursday April 02, 2020 @04:45PM
(#22763572)
These are the same agents that prevented SCTP from being usable outside of private networks. We need to stop catering for them.
I don't see how this refutes the argument. These proxies and firewalls could just have a copy of the decryption key, no? (And if whoever is setting them up doesn't have access to the key, then they probably shouldn't be inspecting the packets anyway)
I'd say that the bigger argument against "nothing is worse off if it is encrypted" is that this takes precious time.
not to mention, that while encryption is cheaper than it was, it still isn't free. And managing certificates and CRLs, while much easier than it used to be is still not trivial, especially on an internal network or localhost.