Hacker News new | ask | show | jobs
by gruez 2824 days ago
plausible deniability? that way if you get hacked by the govt, they can blame it on cybercriminals or western intelligence agencies
1 comments

Also cost.
Cost of what, exactly? An (free) TLS certificate from Let's Encrypt?
I'm guessing that when you start snooping on the everyday mobile activity of 1.3 billion citizens you hit the kind of scaling problems that usually only Facebook and Google see.
Considering China records and stores millions of hours of video data among other things they are probably getting pretty good at snooping.
There's probably (simple/cheap) ways to overcome that, but I see your point.
Cost of servers to handle millions of TLS connection initialisations and HTTPS stream decryptions, versus simple plain-text streaming...
TLS isn't the only option, though. You could use TLS on setup to share a pre-computed secret between the device and the remote server, then bin the TLS connection. After that, encrypt and forward over HTTP.

Laziness isn't an excuse.

FYI, the mechanism you describe is (essentially) how TLS works...