agl42 - Slashdot User

Comment Re:Equivalent to SSH/TLS with self-signed certs. (Score 1) 392

by agl42 on Tuesday October 07, 2008 @11:07PM (#25295325) Attached to: Google's Obfuscated TCP

> Is this, for example, subject to playback attacks?

Yes, it is (there's no server nonce). It's designed that way because it eliminates latency. This is a low security, low cost scheme after all. It's also vulnerable to truncation attacks and, until I implement authenticators, blind corruption.

Google's Obfuscated TCP 392

Posted by kdawson on Tuesday October 07, 2008 @08:53PM from the shake-hands-when-you-say-that dept.

agl42 writes "Obfuscated TCP attempts to provide a cheap opportunistic encryption scheme for HTTP. Though SSL has been around for years, most sites still don't use it by default. By providing a less secure, but computationally and administratively cheaper, method of encryption, we might be able to increase the depressingly small fraction of encrypted traffic on the Internet. There's an introduction video explaining it."

Submission + - http://code.google.com/p/obstcp

Submitted by agl42 on Tuesday October 07, 2008 @12:51PM

agl42 writes: Obfuscated TCP is attempting to provide a cheap opportunistic encryption scheme for HTTP. Despite SSL being around for years most sites still don't use it by default. By providing a less secure, but cheaper possibility (computationally and administratively) we might be able to increase the depressingly small fraction of encrypted traffic on the Internet. There's an introduction video explaining it.

Slashdot Top Deals