[sdnog] Effects of encryption techniques on data-network management

[Sami Salih]

Thx for reply,
This is not in Sudan, and it's not coming from Regulatory, it's a discussion in ISPA to decide to implement such encryption techniques in their hosting premises while the gov necessitates monitoring every things. I'm also for not preventing technologies but I need robust logic with sound justification to convince this association.
BR

Get Outlook for Android<https://aka.ms/ghei36>

________________________________
From: sdnog <sdnog-bounces at sdnog.sd> on behalf of Nishal Goburdhan <nishal at controlfreak.co.za>
Sent: Thursday, October 17, 2019 8:01:26 PM
To: sdnog at sdnog.sd <sdnog at sdnog.sd>
Subject: Re: [sdnog] Effects of encryption techniques on data-network management

On 17 Oct 2019, at 14:11, Sami Salih wrote:


> I need your input to see how we can allow (by regulations) techniques
> such as (TLS1.3, ESNI, DoH, QUIC, etc.).

i don’t understand;  do you have regulations (in sudan) to explicitly
permit/deny the use of TLS1.0 ?  or ssh2?  or ECDSA?   (is this why so
many sudanese websites don’t have an https option?)   if not, then,
why are the protocols you mention special?

this might be a case of me not understanding correctly;  you don’t
need regulation to use (for example) TLS1.3.  right now, someone willing
to spend the time and effort to compile nginx/apache/blah, with the
right flags, can set this up today  (hrm:  note for the sdnog admin
team, to do this on your www/wiki..).

—n.

ps.  i really don’t like DoH;  but i don’t think that calling for
its regulation is the right approach either.
_______________________________________________
sdnog mailing list
sdnog at sdnog.sd
https://lists.sdnog.sd/mailman/listinfo/sdnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20191017/b28f0496/attachment.html>