[Web4lib] IM Security

Micah Stevens micah at raincross-tech.com
Tue Mar 6 12:00:27 EST 2007


On 03/06/2007 07:03 AM, Chadwick, John, DCA wrote:
> I hate to break this to you but some P2P systems are now using encrypted
>
> SSL sessions on port 80 or 443.  These are pretty much indistinguishable
>
> from web traffic, even to a packet inspecting IDS (its encrypted, so the
>
> IDS can't peek at the inner content to say "this is HTTP is its OK" or 
> "this is P2P so its bad").  The arms race moves on... :-)
>
>
>   
You can block by destination though although you're correct in saying 
this makes things potentially more difficult.

-Micah


More information about the Web4lib mailing list