What is the difference between point-to-point and end-to-end security?

Although I was working on WCF, I got a simple doubt, can someone explain to me the difference between point-to-point and end-to-end security?

Thanks Arun

+7
source share
2 answers

Point to point - one direct connection

enter image description here

End - end - connecting with something in the middle

enter image description here

+14
source

Point to point is transport layer encryption. Data is encrypted in the transport layer, for example. (Https)

End to End is the encryption that you encrypt before you remove the transport and decrypt it. e.g. PGP.

see https://en.wikipedia.org/wiki/Point_to_Point_Encryption and https://en.wikipedia.org/wiki/End-to-end_encryption

The wiki makes it look like point to point better, this is due to the work that has been placed in TLS (Transport Layer Security) so that your https traffic is safe. End-to-end can be just as efficient (like PGP), but you need to decide how to transport the decryption key, which is a possible weak link.

For the most reliable, you would use both:

  • Encryption (using the key)
  • Sending by https
  • Get
  • Decrypt (using key)
+4
source

All Articles