[Cryptography] With an e2e network, would the US still need to ban Huawei's 5G
james hughes
hughejp at me.com
Wed Feb 19 20:31:36 EST 2020
E2e networks do not solve vendor trust issues.
Encryption is an iron pipe that rats run through.
A device can be just as vulnerable if someone has an e2e encrypted backdoor, phoning home through an e2e connection or accessing a machine through an e2e encrypted mesh. If the e2e authentication is flawed, or the vendor leaves an e2e testing ID in the system, the results with to without e2e encryption is the same.
Supply chain security is hard and e2e is not a silver bullet.
More information about the cryptography
mailing list