Re: Security over SONET/SDH

[Philip Dorr <tagno25 () gmail com>]

On Mon, Jun 24, 2013 at 9:59 PM, Christopher Morrow
<morrowc.lists () gmail com> wrote:
> it's fair to say, I think, that if you want to  say something on the
> network it's best that you consider:
>   1) is the communication something private between you and another party(s)
>   2) is the communication going to be seen by other than you +
> the-right-other-party(s)
>
> and probably assume 2 is always going to be the case... So, if 1) is
> true then make some way to keep it private:
>   ssl + checking certs 'properly' (where is dane?)
>   gpg + good key material security
>   private-key/shared-key - don't do this, everyone screws this up.

SSH + SSHFP + DNSSEC does public/private key pretty well