Working Group Last Call: QUIC protocol drafts

Re:Working Group Last Call: QUIC protocol drafts by Spivak on Wednesday June 10, 2020 @03:35PM (#23481111)

You don't have a right to know what network traffic is leaving your network from machines you own? Such an odd stance from a techie since this also applies to your Chromecast, Roku, Alexa, Laptop, Phone.

Exactly zero companies care about "protecting the outside world", MITM Boxes are required to have a record and scan all traffic going through your network. If PHI is exfiltrated we can't just tell the auditor "sorry ma'am we have no visibility into our network by design. Could have been from anywhere. shrug"

[ Parent | on HN ]

Re:Working Group Last Call: QUIC protocol drafts by jessaustin on Wednesday June 10, 2020 @05:14PM (#23482200)

I'm sure there are auditors who would sign off on it, but you can't really claim that shitboxes prevent PHI exfil. This is like putting up a ten-foot-long fence a mile from the barn with the open door. You lost the battle the moment that data was viewed on any device that wasn't currently operated by a health professional with a reason to see it.

[ Parent | on HN ]

Re:Working Group Last Call: QUIC protocol drafts by fulafel on Thursday June 11, 2020 @01:40AM (#23485521)

When those computers are used by people who you don't own, this reasoning doesn't hold.

[ Parent | on HN ]

Re:Working Group Last Call: QUIC protocol drafts by Spivak on Thursday June 11, 2020 @07:30AM (#23487675)

Kiosks?

[ Parent | on HN ]