New MinimaLT protocol spearheaded by Mike Petullo: faster than TCP, higher security than TLS. http://cr.yp.to/tcpip/minimalt-20130522.pdf … We helped w/the crypto.
-
@hashbreaker I thought the argument that security should be provided at a higher layer of abstraction already won a while ago.
VPNs (IPsec, ssh) run TCP above the security layer; stops RST forgery if done right (not ssh). Who says that the opposite "won"? @bramcohen
-
-
@hashbreaker Okay, doing crypto at a lower layer can help with DOS from forgery, but nothing deployed in the real world actually does that. -
Many real-world VPNs have exactly this security feature. It's just a historical accident that HTTPS gets the layering wrong.
@bramcohen -
@hashbreaker@bramcohen ya even most IPSec impl work like this in practice since site to site is usually a l2 tunnel with distinct l3 on top
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.