Background: Security Paradigm(s)
Hop-by-Hop security (aka ėlink securityî)
- encrypt -> decrypt -> encrypt -> decrypt -> encrypt -> decrypt
- requires ėtrustedî gateways (e.g., trusted to not disclose decrypted data)
End-to-End security
- source to destination (writer to reader)
- requires non-encrypted headers for routing (e.g., encryption above network or transport layers)