Security Basics mailing list archives

RE: filter ssl traffic

From: "zidan" <zidan00 () fastmail fm>
Date: Mon, 01 Dec 2003 05:08:27 -0800

Organizations install a mail gateway to inspect mail traffic for
viruses, malicious content, porn, etc.
They also install a web proxy to filter the same things. Why not
installing
a proxy to do the same for SSL. The organization has the right to
defend itself, even in the cost of privacy.

in SSL you can't filter anything, therefore, you can transfer viruses or
any
file you wish to. Blocking ssl websites is not practical. Will you
prevent
your employees from buying things online ? And if you allow only specific
sites, how can you make sure that this websites are really to be trusted
?

-- 
  zidan
  zidan00 () fastmail fm

-- 
http://www.fastmail.fm - Same, same, but different

---------------------------------------------------------------------------
----------------------------------------------------------------------------

Current thread:

RE: filter ssl traffic zidan (Dec 01)