Re: Draft finding - "Transitioning the Web to HTTPS"

Yves Lafon wrote:
>
> Eric J. Bowman wrote:
> 
> >
> > My point entirely. Eliminating caching in the name of security,
> > particularly if the result isn't secure, amounts to throwing the
> > baby out with the bathwater. It's a cop-out by the very insitutions
> > folks rely on to solve problems, not come up with cop-outs,
> > regardless of how marketable such cop-outs are to the gullible.
> 
> It depends what "security" means here. Pervasive monitoring (aka 
> sniffing), that should be resolved on a hop-by-hop encryption, or
> MiTM that requires end-to-end encryption.
> 

Crap. I meant privacy, there. Sorry 'bout that, folks.

-Eric