Internet Standards Emphasize User Privacy At Expense of Enterprise Security

Minimalist · Mar 7, 2020

New Internet technologies bring more privacy to the network, but they have the side effect of breaking security in enterprise networks.

At RSA Conference last week, Internet pioneer Paul Vixie warned security professionals that traditional enterprise security efforts such as traffic inspection and DNS filtering will not be possible under new Internet standards emphasizing user privacy. Standards such as DNS over HTTPS, Transport Layer Security 1.3 Encrypted Server Name Indication (TLS 1.3 ESNI), and HTTP/3 over QUIC Internet transport protocol protect traffic in a way that it’s not possible to monitor what sites users are accessing, let alone what content is being sent and received, said Vixie, chairman, CEO, and co-founder of Farsight Security. This leaves enterprise defenders “network blind.”
Click to expand...

https://duo.com/decipher/internet-standards-emphasize-user-privacy-at-expense-of-enterprise-security

mirimir · Mar 7, 2020

Can't they just block everything that can't be inspected?

Minimalist · Mar 8, 2020

I guess that they could. They could also install some software on all stations to monitor internet usage or install their certificate to perform MITM.

mirimir · Mar 8, 2020

Firms that care do all that already. I meant to block stuff that can't be MitMed. Such as secure VPNs, or even SSH.

Log in or Sign up

Internet Standards Emphasize User Privacy At Expense of Enterprise Security

Minimalist Registered Member

mirimir Registered Member

Minimalist Registered Member

mirimir Registered Member

Log in or Sign up

Internet Standards Emphasize User Privacy At Expense of Enterprise Security

Minimalist Registered Member

mirimir Registered Member

Minimalist Registered Member

mirimir Registered Member

Useful Searches