Eric Burger <[email protected]> wrote: > I would offer the problem is not securing links (VPN) or backbones > (links), but to remind people of this (seemingly obsolete) IETF > principle called ‘end-to-end.’ In the context of security, it is that > one cannot presume security because you happen to own the network. > Bad things happen within a single, private network for a whole host > of reasons. So, lock down stuff at the endpoints.
Yes, end-to-end encryption is absolutely essential. But protecting "who communicated with whom" data, which can also be highly sensistive, requires further steps in addition to end-to-end encryption. Greetings, Norbert
signature.asc
Description: PGP signature
_______________________________________________ perpass mailing list [email protected] https://www.ietf.org/mailman/listinfo/perpass
