Security has endpoint limits
05The encrypted tunnel cannot protect data after a compromised endpoint receives it.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 9.5.1 ↗
RFC 4251 · § 9.5.1EXAMPLE
3 / 3
03
Visible traffic shape
An observer may still see traffic timing and approximate size.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The security of endpoints is outside what the transport cipher alone can provide.
- The security of endpoints is outside what the transport cipher alone can provide.
- Forwarding can expose services through the tunnel.
- Traffic analysis can still reveal timing and volume information.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy