Deep packet inspection is dead, and here's why (2017)
I'm worried about this development.<p>One the one hand, ubiquitous encryption is simply required for security on the internet. Things like lets encrypt and warning on http are great improvements.<p>On the other hand, the owner of a network has some right to look into the packets on that network. Especially if the owner of the network also owns the end-points of that traffic.
My main use-case here isn't corporate networks, snooping there makes me uncomfortable.<p>Really, my issue is stuff on my own network. I want to see what my TV sends home. Same with an amazon-echo, or really any IoT thing. Yet, if they all use SSL and don't allow me to add a root CA, I can't look at what they run.<p>A user has no control over an amazon echo. You can't modify the software because the bootloader is locked down. You can't inspect the traffic because it is SSL cert-pinned. Amazon can push updates to it at any time.
All a user gets to do is decide whether it is turned on, and whether it gets a network connection.<p>Really, what I would want to see is the option to install a CA cert on any device I own.
At the same time, that is a terrible idea. Every 14 year old with google is going to find some stack-overflow answer that'll tell them to MitM their TV to do some simple thing.