Re: multiplexing -- don't do it

On Fri, Apr 6, 2012 at 5:52 PM, Nicolas Mailhot <nicolas.mailhot@laposte.net
> wrote:

>
> Le Ven 6 avril 2012 17:34, Mike Belshe a écrit :
> > Once again - the people arguing against encryption are the people that
> want
> > to exploit the user's data transmission stream for their own personal
> gain.
> >
> > If we want the Internet to be protect users - encrypt it.
> >
> > If we want the Internet to be an enabler to vendors that want to
> > change/alter/slow down/trick users into seeing their content, buying
> their
> > products, etc, then don't.
> >
> > It's a simple choice:  users vs interceptors.
>
> It's not.
>
> On a corporation network the users are employees. Their employer does not
> owe
> them unlimited access to facebook, youtube or various porn sites.
>
> If filtering those breaks other network accesses because someone made war
> on
> 'interceptors' it's not the corporation which will be punished it's the
> end-users trying to work through this breakage.
>

Haven't we been down this read already on this mailing list? Let's create
and use explicit trusted https proxies (if you don't know what I'm talking
about here, make sure you've read some of these megathreads from the past
week). If a corporation wants to force all employees to allow their content
to be filtered, then let them use a group policy to force browsers to
connect via this proxy and configure their firewall rules to disallow
direct access to the internet.


>
> If their workstation breaks down because it got infected they won't thank
> you
> for disabling the network antivirus gateway. In fact if the BYOD craze
> succeeds, not only they will have to meet objectives despite computer
> breakdown, but they'll also have to fix their computer themselves.
>
> So may it result in some privacy loss? Maybe (though I'm sure most
> corporations would be happy not to look at a user webmail or bank as long
> as
> they could filter most of the rest). Do users care?  Facebook success says
> they don't.
>
> --
> Nicolas Mailhot
>
>