Re: The TLS hammer and resource integrity

In message <f46d469093a1a7d6a357d77a68217002@treenet.co.nz>, Amos Jeffries writ
es:

>I completely agree that this needs to be addressed, but the transport 
>appears to be doing everything right so far.

Everything, that is, except performance and choice.

There is no way to get around that mandatory TLS is overkill in
many high-volume applications, most notably p0rn.

If you want to kill HTTP/1.1, you have to make HTTP/2.0 a good idea
for the 50% of web traffic consisting of pink bits.

Second, there are places where TLS is simply not a good idea, either
because other security measures are in place, or because transparency
is specifically called for (Think: Flight Recorder).

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

Received on Wednesday, 28 March 2012 07:21:48 UTC