Subject: Re: [saag] Ted Lemon's Discuss on draft-dukhovni-opportunistic-security-05: (with DISCUSS)

From: Sandra Murphy <[email-masked]>
Date: Tue, 2 Dec 2014 11:04:58 -0500

(sorry for late reply, holiday season intervened)

On Nov 25, 2014, at 12:42 AM, Pete Resnick <[email-masked]> wrote:

> On 11/24/14 11:00 PM, Ted Lemon wrote:
>> On Nov 24, 2014, at 11:53 PM, Pete Resnick<[email-masked]>  wrote:
>>   
>>> How cheap is it for an ISP to make you its customer? MiTM attacks are way more expensive than passive attacks.
>>>     
>> Actually no, MITM attacks that just prevent attempts to encrypt are not way more expensive than passive attacks.
> 
> But in order to do the kind of attack EFF is talking about, you have to be on-path. Getting on-path is more expensive than listening from off-path.
> 

Unless of course you can do a routing attack that puts you on-path.

--Sandy