As mentioned in a previous post, encryption tends to break many of the other types of security measures we have come to rely upon.
Intrusion prevention and detection systems do not always work with encrypted traffic very well; the same goes for mail and web filters. You cannot always trust that which is encrypted and can be as much of a security risk as it is added security.
Those types of systems capable of scanning encrypted content can present privacy concerns depending on how they are implemented. Additionally, these systems are not always capable of scanning all types of encrypted traffic, particularly when dealing with proprietary implementations or specs that deviate from a standard.
I am not saying that encryption is worthless, however its pros and cons need to be weighed against other aspects of security carefully to ensure that your network gets the best combination of protection and usability that it can have.
Slashdot Mirror
As mentioned in a previous post, encryption tends to break many of the other types of security measures we have come to rely upon. Intrusion prevention and detection systems do not always work with encrypted traffic very well; the same goes for mail and web filters. You cannot always trust that which is encrypted and can be as much of a security risk as it is added security. Those types of systems capable of scanning encrypted content can present privacy concerns depending on how they are implemented. Additionally, these systems are not always capable of scanning all types of encrypted traffic, particularly when dealing with proprietary implementations or specs that deviate from a standard. I am not saying that encryption is worthless, however its pros and cons need to be weighed against other aspects of security carefully to ensure that your network gets the best combination of protection and usability that it can have.