On: Addressing Visibility Challenges with TLS 1.3 Within the Enterprise

[mavhc]

How will intercepting traffic stop that? They can just use another layer of encryption.

Better to monitor all devices for unusual network behaviour, and monitor the endpoints themselves with antivirus.

[unethical_ban → mavhc]

I think it's unacceptable for a business to be told "It's literally impossible to know what is being communicated outbound from your endpoint. We can only do heuristics."

[Avamander → unethical_ban]

If you don't control the endpoint then you can cry about it.

[unethical_ban → Avamander]

Hot take. I mean, with TLS decryption, the company does control the endpoint, or at least what the endpoint trusts on a network layer. But people here are crying about that.