Encrypting absolutely everything, even within the LAN
- by chris_l
Has anybody tried that approach already? I'm really considering it: Instead of relying on network based IDS etc., every packet must use encryption which was initiated by a certificate issued by my own CA.
Every client gets a unique client certificate
Every server gets a unique server certificate
Every service additionally requires to login.
Both SSL and SSH would be ok. Access to the internet would be done via an SSL tunnel to the gateway.
Is it feasible? Does it create practical problems? How could it be done and enforced? What do you think?