Re: IESG feedback on core drafts.

[Frank Cusack <fcusack%fcusack.com@localhost>]

On Thu, Apr 03, 2003 at 09:04:04AM +0000, David Wagner wrote:
> Frank Cusack  wrote:
> >On Mon, Mar 31, 2003 at 08:08:59AM -0800, Chris Lonvick wrote:
> >>    The "none" cipher is provided for debugging and should never be used
> >>    except for that purpose.  It's cryptographic properties are
> >>    sufficiently described in RFC 2410.
> >
> >I believe the "none" cipher has legitimate uses besides debugging.  You
> >may want the authentication mechanisms provided by SSH, but not the data
> >confidentiality.  EG: you are copying already encrypted data between
> >machines that have such low CPU power that encryption is a significant
> >overhead.
> 
> Do you really think there is any real-world case where this will come up?

Sure, I regularly copy terabytes of data around, data that is not
encrypted but also not worth protecting.  The time cost of encryption
is visible to me, partly for billing reasons.

/fc