OK, shall we savage another security solution?

Florian Weimer fw at deneb.enyo.de
Mon Sep 24 13:49:31 EDT 2007


* Steven M. Bellovin:

> If done properly -- i.e., with cryptographic protection against new
> firmware or policy uploads to it -- it's immune to host or user
> compromise as a way to disable the filter.

Some of the models only have got a single USB connector.  I can't see
how they can ensure that they are always on the forwarding path.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list