Tag Info

New answers tagged

0

There are some misconceptions or half-truth about HTTPS: Performance: If you have lots of short connections it will be much slower because the main costs are in the initial key exchange and in the additional round-trips needed to establish the SSL connection on top of the TCP connection. The encryption itself is cheap, that is the more you transfer over ...


2

The additional overhead caused by the encrypting your payload is almost zero since CPUs today can encrypt at speeds of up to hundreds of MB/s. The only noticable delay is during connection setup, as you need a few additional round trips to set up SSL/TLS. However, if you are transferring large files, this round trip cost is negligible. Yes, caching of ...


1

For what it's worth, I'm on the enterprise security team overseeing half a dozen major companies that we own (mostly in USA), totaling over 10,000 employees, and we don't employ SSL decryption anywhere. A technique like that isn't even on our radar.


3

"SSL decryption" (through a firewall-controlled CA and on-the-fly MitM) is a feature offered on most "expensive" firewall appliances, so one can say that most big companies can deploy SSL decryption. Whether they really do it is another matter. Common reasons for not using that feature include: Legal concerns. In many jurisdictions, employees are allowed ...


1

I believe it depends on which industry you are in. It might be justified if the company has lots of proprietary content which they are afraid of competitors getting their hands on. Some companies even have policies forbidding the use of internet for non-work related purposes. Therefore, if you are using the internet solely for work purposes, decryption of ...



Top 50 recent answers are included