Re: Simple Pimple firewalls

[David D.W. Downey]

>      Unless a firewall has the decryption key for encrypted traffic, the
> firewall cannot check the encrypted portion of traffic at all.  If all
> traffic were encrypted then the firewall would become just another hop on
> the network.
>


The firewall has nothing to do with the payload in this case. I would LOVE
for someone to point me at a firewall that has encrypted traffic but no
heavy firewall protecting that data. (AKA< I would be a rich man if the
banking system worked that way!)




>      The idea behind a firewall i.e. filtering out unwabted traffic is
> going to be a valid and necessary security measure for a while.  Instead of
>

It is ALWAYS going to be valid and needed.


-- 

David D.W. Downey
RHCE


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]