Re: [TCLUG:12613] Reasons not to use Apache?

["Eric M. Hopper" <hopper@omnifarious.mn.org>]

On Thu, Jan 20, 2000 at 05:52:20PM -0600, Dave Sherohman wrote:
> 
> As for me, I assume that, if both machines have telnet-ssl
> installed, it'll automatically grab this sort of connection.  But I
> don't know if that's correct.  (Actually, now that I stop to think
> about it, I don't think it is.  If I do a manual telnet to a
> nonstandard port, I don't see the SSL key information...)

	Umm, your second though is right, it isn't.  You'd have to use
SSL in your program to make it work that way.

> My boss, on the other hand, seems to consider most security concerns
> to be 'worrying about some all-powerful cracker' and then turns around
> and compares it to people sitting in church because they're 'worried
> about some all-powerful being'.  (We actually did some custom
> modifications for a customer who wanted communications to be encrypted
> and he spent more time coming up with ways to arrange it so that it
> would be up to them to implement than it would've taken to just
> configure the damn thing to run over HTTPS or e> SSL instead of plain
> HTTP.  *sigh*)

	Silly boss.  Someone should run a packet sniffer on your network
and capture all of his passwords and start using his account to say
interesting things in forums he wouldn't want to be caught frequenting.
I bet his attitude would change pretty quickly then.

*grin*,
-- 
Its name is Public Opinion.  It is held in reverence. It settles everything.
Some think it is the voice of God.  Loyalty to petrified opinion never yet
broke a chain or freed a human soul.     ---Mark Twain
-- Eric Hopper (hopper@omnifarious.mn.org  http://omnifarious.mn.org/~hopper) --

PGP signature