Not encrypting RPC traffic? IETF bods would like to change that

guest · Nov 14, 2018

Oi! Not encrypting RPC traffic? IETF bods would like to change that
RPC over TLS: You know it makes sense
November 14, 2018
https://www.theregister.co.uk/2018/11/14/internet_draft_rpc_over_tls/

An Internet Engineering Task Force group has turned its attention to how Remote Procedure Calls (RPC) travel over the internet, and decided a bit of (easy) encryption is in order.

Putting RPC behind a wall of encryption would improve more than privacy – it also helps protect the service itself, by removing its direct exposure to the Internet.

In this Internet-Draft, Myklebust and Lever said the issues that hampered RFC 7861 were: it was relatively difficult to keep per-host costs under control; it left some parts of the RFC header in clear text; [...]

Their alternative is to use a TLS mechanism that “can protect the privacy of each RPC connection transparently to RPC and Upper Layer protocols”.
Click to expand...

Log in or Sign up

Not encrypting RPC traffic? IETF bods would like to change that

guest Guest

Log in or Sign up

Not encrypting RPC traffic? IETF bods would like to change that

guest Guest

Useful Searches