[GH-ISSUE #144] 将Shadowsocks Rust的加密设置为None是否安全? #117

Closed
opened 2026-02-26 12:34:01 +03:00 by kerem · 2 comments
Owner

Originally created by @windstander on GitHub (Dec 14, 2020).
Original GitHub issue: https://github.com/cbeuw/Cloak/issues/144

因为SS的数据外层套了一个Cloak伪造的TLS,所以SS流量本身的加密设置为None是否也是安全的并能大幅提升速度?

Originally created by @windstander on GitHub (Dec 14, 2020). Original GitHub issue: https://github.com/cbeuw/Cloak/issues/144 因为SS的数据外层套了一个Cloak伪造的TLS,所以SS流量本身的加密设置为None是否也是安全的并能大幅提升速度?
kerem closed this issue 2026-02-26 12:34:01 +03:00
Author
Owner

@windstander commented on GitHub (Dec 21, 2020):

Cloak isn't intended to provide transport security. The point of encryption is to hide fingerprints of proxy protocols and render the payload statistically random-like. You may only leave it as plain if you are certain that your underlying proxy tool already provides BOTH encryption and authentication (via AEAD or similar techniques).

这样来看,还是SS加密,Cloak为Plain比较好。

<!-- gh-comment-id:748717887 --> @windstander commented on GitHub (Dec 21, 2020): Cloak isn't intended to provide transport security. The point of encryption is to hide fingerprints of proxy protocols and render the payload statistically random-like. You may only leave it as plain if you are certain that your underlying proxy tool already provides BOTH encryption and authentication (via AEAD or similar techniques). 这样来看,还是SS加密,Cloak为Plain比较好。
Author
Owner

@MXzander commented on GitHub (Dec 3, 2022):

因为SS的数据外层套了一个Cloak伪造的TLS,所以SS流量本身的加密设置为None是否也是安全的并能大幅提升速度?

<!-- gh-comment-id:1336218290 --> @MXzander commented on GitHub (Dec 3, 2022): > 因为SS的数据外层套了一个Cloak伪造的TLS,所以SS流量本身的加密设置为None是否也是安全的并能大幅提升速度?
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Cloak#117
No description provided.