> On Jun 8, 2020, at 7:18 PM, John C Klensin <john-ietf@xxxxxxx> wrote: > > Yet, unless I have completely > misunderstood, much of the conversation has been about methods > that were designed for privacy protection using encryption with > integrity protection being nothing but a necessary side-effect. Encryption without authentication is subject to a variety of attacks such as truncating messages, splicing them, or changing the encrypted text. That's why most modern encryption systems provide authentication at the same time as encryption. So it is much more than "a side effect"... -- Christian Huitema