Re: Network security on multiple levels (was Re: NYT covers China cyberthreat)
Not to mention, the KG units are dot government only.. For obvious reasons. From my Android phone on T-Mobile. The first nationwide 4G network. -------- Original message -------- From: Christopher Morrow <morrowc.lists@gmail.com> Date: 02/21/2013 8:37 AM (GMT-08:00) To: Jack Bates <jbates@brightok.net> Cc: nanog@nanog.org Subject: Re: Network security on multiple levels (was Re: NYT covers China cyberthreat) On Thu, Feb 21, 2013 at 11:23 AM, Jack Bates <jbates@brightok.net> wrote:
On 2/21/2013 12:03 AM, Scott Weeks wrote:
I would sure be interested in hearing about hands-on operational experiences with encryptors. Recent experiences have left me with a sour taste in my mouth. blech!
scott
Agreed. I've generally skipped the line side and stuck with L3 side encryption for the same reason.
and... some (most?) line-side encryptors light the line up fullspeed between the encryptors... if they are also attempting to suppress traffic analysis... so that can be costly if you don't own the whole pipe :)
On Thu, Feb 21, 2013 at 04:41:42PM +0000, Warren Bailey wrote:
Not to mention, the KG units are dot government only.. For obvious reasons.
Erm ... yesandno. Lots of defense contractors have one end of a secured circuit. Been there, installed-and-maintained them. -- Mike Andrews, W5EGO mikea@mikea.ath.cx Tired old sysadmin
Contractors with facility clearances? I would find it hard to believe dot gov would run secure circuits to a non secure facility. ;)
From my Android phone on T-Mobile. The first nationwide 4G network.
-------- Original message -------- From: Mike A <mikea@mikea.ath.cx> Date: 03/12/2013 3:04 PM (GMT-08:00) To: nanog@nanog.org Subject: Re: Network security on multiple levels (was Re: NYT covers China cyberthreat) On Thu, Feb 21, 2013 at 04:41:42PM +0000, Warren Bailey wrote:
Not to mention, the KG units are dot government only.. For obvious reasons.
Erm ... yesandno. Lots of defense contractors have one end of a secured circuit. Been there, installed-and-maintained them. -- Mike Andrews, W5EGO mikea@mikea.ath.cx Tired old sysadmin
On 3/12/2013 4:16 PM, Warren Bailey wrote:
Contractors with facility clearances? I would find it hard to believe dot gov would run secure circuits to a non secure facility. ;)
The word "Contractor" is usually used to refer to anyone that has a contract to do work with the government. Having spent nearly my entire working life in those situations, I can absolutely and completely guarantee that this type of circuit is common, that the types of phones referred to are commonplace in such an environment, and that I have used such phones in the course of a normal day. The world is filled with more things, Horatio, than are met with in your philosophy (with apologies to W.S.). -- The right to buy weapons is the right to be free. The Weapon Shops of Isher, by A. E. van Vogt
From: Shrdlu [mailto:shrdlu@deaddrop.org] On 3/12/2013 4:16 PM, Warren Bailey wrote:
Contractors with facility clearances? I would find it hard to believe dot gov would run secure circuits to a non secure facility. ;)
The word "Contractor" is usually used to refer to anyone that has a contract to do work with the government. Having spent nearly my entire working life in those situations, I can absolutely and completely guarantee that this type of circuit is common, that the types of phones referred to are commonplace in such an environment, and that I have used such phones in the course of a normal day.
STU / STE units are not KGs. Different type of equipment. Far less functional and single purpose. Jamie
From: Mike A [mailto:mikea@mikea.ath.cx] On Thu, Feb 21, 2013 at 04:41:42PM +0000, Warren Bailey wrote:
Not to mention, the KG units are dot government only.. For obvious reasons.
Erm ... yesandno. Lots of defense contractors have one end of a secured circuit. Been there, installed-and-maintained them.
They don't belong to us, they're in a secured area inside a secured area (yes, I typed that twice on purpose), and they are regularly inspected by whichever bit of the fed loaned them to us. It's in our facility only as long as the circuit it's servicing exists. Jamie
participants (4)
-
Jamie Bowden -
Mike A -
Shrdlu -
Warren Bailey