🚀 go-pugleaf

--

In article <2416@sdcsvax.UCSD.EDU> you write:

>Re: secure transmission media.
>
>[...] On an Ethernet,
>the only way to prevent wiretapping is encryption of the data [...]

I believe it's very important for security engineering to keep its terms
in proper parlence.  Encryption of data does not prevent wiretapping, it
merely (and presumably) renders the envelope contents not-easily-readable.

This is a significant difference.  Note that the "envelope" is still
available to an intruder (packet headers, message sizes, and precedence,
if it's provided).  Armed with this information, A good TA person could
make short work of figuring out the contents, if so inclined.

Preventing wiretapping (such as putting the Ethernet* inside conduit which
is occasionally inspected for tampering, etc.) would eliminate the traffic
analysis threat (except for situations where TEMPEST equipment might be
required--which is a much more problematic setting, anyway).


--