[lug] security question

Nate Duehr nate at natetech.com
Thu Jun 3 17:06:23 MDT 2010


On 6/3/2010 9:47 AM, George Sexton wrote:
> You have to weigh whether the additional security of using SSH to move
> already encrypted data is superior to using a simpler protocol.
>    

I like both.  Belt & Suspenders.  Why?...

> For example, if the data is strongly encrypted you could just use a simple
> web server to host the data. It cuts out the SSH side and a lot of
> complexity. The argument against that is that "anyone" could download the
> encrypted data. What would they then do with it?
>    

Strongly encrypted today, is tomorrow's moderately encrypted. ;-)  DES 
anyone?

This, of course, goes for both the encryption used on the file itself, 
and the encryption on the transport.  Pick two DIFFERENT algorythms.

Nate



More information about the LUG mailing list