Google's Obfuscated TCP

agl42 writes "Obfuscated TCP is attempting to provide a cheap opportunistic encryption scheme for HTTP. Though SSL has been around for years, most sites still don't use it by default. By providing a less secure, but computationally and administratively cheaper, method of enctyption, we might be able to increase the depressingly small fraction of encrypted traffic on the Internet. There's an introduction video explaining it."

No responses

[owlstead]

Any reason why there are no responses here? Have they been obfuscated somehow?
 

Not obfuscated, but...

[DP1149]

See, it already works! It changed encrypted to enctypted. There. Fixed that for ya.

Brilliant Idea

[Anonymous Coward]

If this were to make it into the regular version of Firefox or Apache then it would be really useful, but it truly belongs in the kernel's TCP/IP stack.

wait...what?

[anthonys_junk]

Is anybody else getting the feeling that this is a little half-baked?

Why could we not fix some of the cost/uptake issues with SSL to encourage broader uptake rather than implement some broadly unsupported kludge that provides minimal benefit??

Re:

[OldeClegg]

> fix some of the cost/uptake issues with SSL

Yep. Perhaps even (oh, heaven forfend!) publicly administered certs.

Re:

[USPTO]

Spin off the authentication part of SSL from the encryption part, and roll the encryption part into an http extension. Patch apache and firefox with the extension and see the fraction of encrypted traffic on the Internet go from depressingly small to impressively significant.

Re:

[account_deleted]

Comment removed based on user account deletion

An Essential Development

[maharg]

Thank you - something of this sort is essential for the semantic web to work as envisaged by Berners-Lee - ubiquitous osfuscation/encryption ensuring trust in the medium carrying the knowledge. With Moore's law, there are good prospects for making tcp have strong inbuilt security. I've long thought that some of the mechanisms in use (SSL, Cookies..) are at too high a level in the stack. So I review this as the start of a much-need re-factoring. Kudos !