[Ntp] Antw: [EXT] Re: NTPv5 draft

[Ulrich Windl <[e-mail]>]

>>> Philip Prindeville <[e-mail]> schrieb am 07.12.2020
um
23:25 in Nachricht
<[e-mail]>:
> If you’re saying “we all agree […] it could be optional” then I dissent.
> 
> I think that “private networks” and the notion of “the Intranet as 
> implicitly secure” and the term “inside the perimeter” will fall by the 
> wayside before 2030.
> 
> One of my previous employers (Gigamon) built an entire business model on the

> assumption that you need to monitor internal traffic for malware, insider 
> attacks, etc. and hence marketed “network visibility appliances” (i.e. 
> switches and taps that could intercept traffic and clone it to an IDS for 
> real-time analysis).  The market apparently agrees.
> 
> Those that don’t think they need security inside their perimeter are simply

> those that haven’t had an insider attack, or someone bring in a contaminated

> laptop onto the campus network, etc… or haven’t yet realized that they
have.

I think the bigger problem is some trojan sent from external having access to
the internal (unsecured) network.
Most employees have to sign that they don't do evil things and they don't
publish confidential information, so I don't see insiders being that evil, but
theere may be bosses using that argument to monitor what their emplyees do
(which may be illegal just the same way...).

Regards,
Ulrich