Sniffing data off the Internet backbone was so practical that there are well-known cases of it actually happening to backbone providers. In one famous case, someone managed to hook solsniff.c up to Sprintnet's core.
I no longer worry about the backbone sniffers - that's like drinking from a firehouse the size of 3 Gorges Dam. You can't surreptitiously consume that much I/O.
I'm much more concerned about small targeted stuff in data centers and colo cages, sniffing just a few backend servers, behind the SSL terminator. Or, you know, just 'select * from creditcardinfo';...
Comments
Sniffing data off the Internet backbone was so practical that there are well-known cases of it actually happening to backbone providers. In one famous case, someone managed to hook solsniff.c up to Sprintnet's core.
I no longer worry about the backbone sniffers - that's like drinking from a firehouse the size of 3 Gorges Dam. You can't surreptitiously consume that much I/O.
I'm much more concerned about small targeted stuff in data centers and colo cages, sniffing just a few backend servers, behind the SSL terminator. Or, you know, just 'select * from creditcardinfo';...