Re: [loganalysis] Logging standards and such

From: Jose Nazario (joseat_private)
Date: Thu Aug 16 2001 - 06:47:56 PDT

  • Next message: Rich Salz: "Re: [loganalysis] Logging standards and such"

    On Wed, 15 Aug 2001, Corey Steele wrote:
    
    > Why not https?  Why not SSH tunnels?
    
    please go learn SSL/TLS basics. HTTPS is *one* implementation of a
    protocol over SSL.
    
    
    SSL and TLS Essentials: Securing the Web
    by Stephen A. Thomas
    ISBN: 0471383546
    
    thanks. hopefully you'll see that many of your conclusions are based on
    what may very well be a poor understanding of what TLS/SSL are and how
    they work. while an applicaton would have to learn how to speak SSL/TLS to
    use it natively, various wedge applications can do the SSL tunneling,
    negotiation etc for naive apps or ones you can't force SSL into (ie no
    source).
    
    hope that helps. (FWIW, for VPNs i prefer IPsec tunnels.)
    
    ____________________________
    jose nazario						     joseat_private
    	      	     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
    				       PGP key ID 0xFD37F4E5 (pgp.mit.edu)
    
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Thu Aug 16 2001 - 09:27:03 PDT