[159275] in North American Network Operators' Group
Re: Gmail and SSL
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Wed Jan 2 22:33:27 2013
To: George Herbert <george.herbert@gmail.com>
In-Reply-To: Your message of "Wed, 02 Jan 2013 12:10:55 -0800."
<CAK__KzsBYUH=pF49O6MTTp9M3C-X01ytxtsav-KncSLeLpKWzg@mail.gmail.com>
From: Valdis.Kletnieks@vt.edu
Date: Wed, 02 Jan 2013 22:31:34 -0500
Cc: John Levine <johnl@iecc.com>, nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1357183894_45073P
Content-Type: text/plain; charset=us-ascii
On Wed, 02 Jan 2013 12:10:55 -0800, George Herbert said:
> Google is setting a higher bar here, which may be sufficient to deter
> a lot of bots and script kiddies for the next few years, but it's not
> enough against nation-state or serious professional level attacks.
To be fair though - if I was sitting on information of sufficient value that I
was a legitimate target for nation-state TLAs and similarly well funded
criminal organizations, I'd have to think long and hard whether I wanted to
vector my e-mails through Google. It isn't even the certificate management
issue - it's because if I was in fact the target of such attention, my threat
model had better well include "adversary attempts to use legal and extralegal
means to get at my data from within Google's infrastructure".
"Operation Aurora".
--==_Exmh_1357183894_45073P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iQIVAwUBUOT7lgdmEQWDXROgAQLK5BAAqPVrhQVf2VZElf5Ot0c9+vJh9eNOviKN
0ePPVAPhPduvD2HLV0LDp/oy/xmjpU1Waq+iHShuCWXLWZfEihgLdZaAguUoA6uZ
FoSUmjUWyHnT3sXG8YUeBQYHfYILPSa05OJkQgliPKr+Wv0tIkVh/ADIjwQWiEQY
rdlqkDctnlaT5mhZocwWOZWwJ+Nn0bwx1h8A2eDujlDBuXX55o/VmOsc6IjfgQpE
CLQGiimbHzb1KOszyF82DAyvbD8yUg/fI4omgXV6t44w0WZw839NOTsM7aSNUVLz
meNcZD6HOOi896tECgSvTOI5HsaUgRH/9KukMiNrMo7JgHMzfswHyE9w8ntZ0cky
8nXQmWa2SR7aPpPOfnROlm8lLjNl2bsUc1583hFdCHJdSH99B89vnTxYgs9xr0Zg
TYoU7fNz2cOXl8hfASwKcdfEQfLdkToassysGQGXmK4AZDiHoOzf3qNVJ46yBQ00
lvMcJREukBbZLsquM87/6h1Z+R6SglfL6IRIDNV8y3aWaWzX/0WsTNJaLKK4u+fX
0LWhE6ogUhViBh6AtROxh6FAXrUp5uZ6kMQ1HJY1I3tMqWpNuG4qky4y3bOn6HDn
y7yazSP/3ObGRQdaqXyUru65F6ico8FB2VKDygNwQGSfgkzs4TkaS+WziKK9kbWg
Ssr3Tyi4NTA=
=AmRO
-----END PGP SIGNATURE-----
--==_Exmh_1357183894_45073P--
