[Web4lib] IM Security

[Chadwick, John, DCA]

Actually, I've seen some messaging systems using web browsers, either 80
or 443.

And, one thing I forgot to mention in my last posting, with Vista
utilizing P2P for file sharing and collaboration, the whole issue of P2P
as evil will need to be revisited. 

John

-----Original Message-----
From: J.P.Knight [mailto:J.P.Knight at lboro.ac.uk] 
Sent: Tuesday, March 06, 2007 7:13 AM
To: Chadwick, John, DCA
Cc: Micah Stevens; web4lib at webjunction.org
Subject: RE: [Web4lib] IM Security

On Tue, 6 Mar 2007, Chadwick, John, DCA wrote:
> As to P2P technologies, there are security and copyright issues
involved
> with P2P that concern me. Our library is part of the State of New
Mexico
> network, and P2P is blocked at the state level. We have fought to have
> many things opened up for our institution, but P2P is one that I
cannot
> get through.

I hate to break this to you but some P2P systems are now using encrypted

SSL sessions on port 80 or 443.  These are pretty much indistinguishable

from web traffic, even to a packet inspecting IDS (its encrypted, so the

IDS can't peek at the inner content to say "this is HTTP is its OK" or 
"this is P2P so its bad").  The arms race moves on... :-)

______________________________________________________________________
This inbound email has been scanned by the MessageLabs Email Security
System.
______________________________________________________________________


Confidentiality Notice: This e-mail, including all attachments is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited unless specifically provided under the New Mexico Inspection of Public Records Act. If you are not the intended recipient, please contact the sender and destroy all copies of this message. -- This email has been scanned by the Sybari - Antigen Email System.