Actually, there are name constraints that would allow you to sign for yourself if you could anchor your own CA to the trust chain. Weâ(TM)re closer than many think.

In order for that to work though, the name constraint would need to be marked critical (refuse trust chain if not supported), and itâ(TM)s mostly just Apple that doesnâ(TM)t support it.

If Apple fixes that, and Letâ(TM)s Encrypt (for example) would let you anchor from them, things could move in that direction.

Personally Iâ(TM)d have liked to see these things integrated into DNSSEC as well.

If everything is perfect? No.

If you have two plaintext blocks, and encrypt using ECB mode with the same IV though, then the two cipher blocks would turn out identical cipher blocks. Would make it trivial to see which was the encrypted one.

So basically the answer is; it depends.

If you need to ask the question, do more research before you continue your work. This is stuff you really should understand before you embark on such a project.

Hi,

No idea about pros and cons and so on, but figured it could be interesting to take a peek at these for a less expensive solution, even though different.

http://www.etymotic.com/ephp/compmic.aspx

There are 600 students, most of which will probably bring a laptop, and want to stay in touch, just as you do.

Seems like it could be an idea to bring a satellite uplink, provide services to the students at a small upmark in your costs, and use the earnings to pay for your own bandwidth use?

Alternatively set up a proxy;

Charge the others for their used bandwidth, on their side of the connection. If two people download the same URL, you're charging them twice, leaving earnings to cover your own use.

Be honest with them about that though, so nobody feels cheated.

Another thing to consider is to go to a satellite provider and simply ask if they want to provide you with equipment and/or some bandwidth for free, or at a reduced cost. It's a great way for them to market themselves to the 600 students, which throughout their careers might need a similar service, and guess which provider they'd think of first? Surely the one that helped them out when they were students.

The three options can be combined offcourse. If you can borrow equipment for free, get slightly lower bandwidth fees, and a flexible payment plan, so you don't get stuck with a huge bill, you could be set for the duration. :)