SSL Certificate

Jonus

Well-Known Member

• Nov 16, 2008

• #1

Has anyone ever looked at the feasibility of installing an SSL certificate on this webserver. Would make logging in and posting a little more secure from prying snoops.

 

GrowTech

stays relevant.

• Nov 16, 2008

• #2

nobody is prying or snooping around the server though...

 

Jonus

Well-Known Member

• Nov 16, 2008

• #3

SSL isn't designed to protect the server, it gives a secure connection between the web browser client and the server so they can exchange data safely in an encrypted environment.

Added: The same as say logging into your online banking or Paypal, are all behind an https://.... connection.

 

GrowTech

stays relevant.

• Nov 16, 2008

• #4

What is there to encrypt? It's not like you're exchanging personal information, or anything like that. SSL would be a waste of money... nobody is sniffing the data that runs in and out of this server.

I know what SSL is... network security auditing was part of my consultancy for many years.

 

Jonus

Well-Known Member

• Nov 16, 2008

• #5

Then you will know I am talking about data going in and out of the computers of the users of this site, where the real risk is who may or may not be being logged by interception warrants issued on their internet service providers by the police. Its just a further peace of mind thing for users. Just a suggestion, take it or leave it.

 

GrowTech

stays relevant.

• Nov 16, 2008

• #6

Well become an elite member, and you'll get proxies to use!

Client side or mid stream security shouldn't be RIU's problem to deal with...

 

Jonus

Well-Known Member

• Nov 16, 2008

• #7

Proxys wont help the users though if their ISP is doing the logging.

I agree its not your problem, its just a peace of mind thing.