Data Security Measures

[liRW]

How to implement data transmission encryption? Does the official provide a solution? If not, which parts need to be modified to implement it by myself?

[liRW]

UKEYs are widely used in many application scenarios such as finance and government. If USBIP is used to share UKEYs, is there any way to ensure the security of the certificate transmission within these UKEYs?

[liRW]

Combining a VPN with USB/IP is indeed a feasible approach to address USB/IP’s inherent security flaws, though it does introduce some operational complexity.

[dorssel]

No, USBIP is inherently "unsafe". It does use regular TCP, so IPSEC could be a solution. This was the original intent of USBIP, see https://elixir.bootlin.com/linux/v6.16.9/source/tools/usb/usbip/src/usbip_network.h#L122. That comment has been there since day one, and was never implemented.

[ryangriggs]

Wireguard would be an easy solution in this case.