> On Oct 24, 2017, at 4:24 PM, Ted Lemon <mel...@fugue.com> wrote: > > On Oct 24, 2017, at 4:21 PM, David A. Cooper <david.coo...@nist.gov > <mailto:david.coo...@nist.gov>> wrote: >> I'm not suggesting that cash strapped schools would use one of these >> devices. I'm simply saying that such a solution would be simpler and far >> more effective than trying to use draft-rhrd-tls-tls13-visibility to snoop >> on outgoing traffic. > > Again, if that were true, then it would also be true that these devices would > nicely solve the problem that draft-rhrd-tls-tls13-visibility solves.
I think your suggestion is addressed as one of the alternative solutions in draft-rhrd-tls-tls13-visibility. Enterprise network operators say that deploying these devices to provide the same visibility as the visibility extension would, at best, be highly complicated and expensive, if not altogether impossible. - Ralph
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls