CMU: The Cost of the "S" in HTTPS
(CMU): http://www.cs.cmu.edu/~dnaylor/CostOfTheS.pdf
"Increased user concern over security and privacy on the Internet
has led to widespread adoption of HTTPS, the secure version of
HTTP. HTTPS authenticates the communicating end points and
provides confidentiality for the ensuing communication. However,
as with any security solution, it does not come for free. HTTPS
may introduce overhead in terms of infrastructure costs,
communication latency, data usage, and energy consumption.
Moreover, given the opaqueness of the encrypted communication,
any in-network value added services requiring visibility into
application layer content, such as caches and virus scanners,
become ineffective. This paper attempts to shed some light on
these costs. First, taking advantage of datasets collected from
large ISPs, we examine the accelerating adoption of HTTPS over
the last three years. Second, we quantify the direct and indirect
costs of this evolution. Our results show that, indeed, security
does not come for free. This work thus aims to stimulate
discussion on technologies that can mitigate the costs of HTTPS
while still protecting the user's privacy."
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
I am a consultant to Google -- I speak only for myself, not for them.
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
