[lug] security question

[Nate Duehr]

On 6/3/2010 9:47 AM, George Sexton wrote:
> You have to weigh whether the additional security of using SSH to move
> already encrypted data is superior to using a simpler protocol.
>    

I like both.  Belt & Suspenders.  Why?...

> For example, if the data is strongly encrypted you could just use a simple
> web server to host the data. It cuts out the SSH side and a lot of
> complexity. The argument against that is that "anyone" could download the
> encrypted data. What would they then do with it?
>    

Strongly encrypted today, is tomorrow's moderately encrypted. ;-)  DES 
anyone?

This, of course, goes for both the encryption used on the file itself, 
and the encryption on the transport.  Pick two DIFFERENT algorythms.

Nate