Re: [AusNOG] dark fibre encryption

2020-04-07 Thread Phillip Grasso
macsec is your best bet. Lots of vendors support it and is reasonably mature. better if you pick one that allows dual keys, no downtime with rotating keys or certs. Watch out bunch of platforms will HALVE or worse the performance of your gear by turning on macsec. e.g. cisco rosco On Tue, 7 Apr 20

Re: [AusNOG] dark fibre encryption

2020-04-07 Thread Scott Weeks
--- dale.shaw+aus...@gmail.com wrote: From: Dale Shaw >> Australian, ASX listed company if that matters. > > And closely related to the military and gov't... :) Tin foil hat: off Crackpot mode: disabled Backyard baked bean-filled bunker: non-existent Well, I'm not sure what you're implying he