comp.security.firewalls archive
Re: Anti-spyware at the Gateway
From: Sebastian Gottschalk <seppi@seppig.de>
Date: Mon Mar 13 2006 - 19:43:12 CET
Date: Mon Mar 13 2006 - 19:43:12 CET
Somebody. wrote:
> Encrypted data streams don't look like unencrypted data streams, and so can
> be detected.
Wrong. About every JPEG content body or any other well compressed data
are indistinguishable from pseudorandom data, so are encrypted data.
> When encrypted streams are allowed only to whitelist hosts, and you don't
> whitelist proxies, they become obvious.
Would you allow access to <http://www.nytimes.com/>?
Received on Mon May 1 00:56:59 2006