1

I remember something offhand that back when SSL was being deployed worldwide (at around 2010) the big players like google would only deploy it on external interfaces, and internally services would still prefer the non encrypted communications, until someone managed to get into the infrastructure and show that internally you should be using encryption as well. Was this true?

Improve this question
New contributor
Dragas is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

1 Answer 1

Reset to default
3

According to the NSA, this was true:

"According to a post-it style note from the presentation, the exploitation relied on the fact that (at the time at least) data was transmitted unencrypted inside Google's private cloud, with "Google Front End Servers" stripping and respectively adding back SSL from/to external connections. After the information about MUSCULAR was published by the press, Google announced that it was working on deploying encrypted communication between its datacenters.[2]"

https://en.wikipedia.org/wiki/MUSCULAR

https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .