Re: Web Hosting / and Site Security Question

From: Adam Jones (ajones1_at_gmail.com)
Date: 10/09/04

  • Next message: Sickle: "RE: IIS 6 FTP" 
    Date: Fri, 8 Oct 2004 20:50:25 -0500
To: Mailing Lists <itmaillist@gmail.com>

    IMO using SSL for things like link pages should be determined by your
    userbase. SSL adds extra connection overhead, which makes the site
    crawl that much slower for dialup users. That said if the majority of
    your traffic is on a bigger pipe there is not much in the way of
    disadvantages.

    Although it is nice to see via a technology like SSL that you are
    viewing the website you think you are, the majority of users are
    either going to 1) not understand the technology well enough to
    benefit from it and be able to know the difference, or 2) understand
    what phishing scams are, and generally be able to distinguish them.

    In the end it (like always) boils down to what your customer wants, or
    what their customers want. If technologies like SSL will make someone
    more happy with their product/service, work with them to decide if the
    extra feature is worth the extra headache. I agree completly that they
    need to shop around for a security conscious provider, the additional
    risk of not using one is far from worth whatever savings you may get
    from it.

    -Adam

  • Next message: Sickle: "RE: IIS 6 FTP"

    Relevant Pages

    • Re: [fw-wiz] The Outgoing Traffic Problem --
      ... technology known as secure sockets layer, ... technology to break into computers, and they can use the same technology ... actually hire folks with clues and/or experience to do security postureing ... No SSL Firewalls!!!!! ...
      (Firewall-Wizards)
    • Re: [fw-wiz] The Outgoing Traffic Problem --
      ... technology to break into computers, and they can use the same technology ... to transmit stolen information covertly off a victim's network. ... No SSL Firewalls!!!!! ... Organizations are going to try to add signature-style ...
      (Firewall-Wizards)
    • Net security software exposed
      ... The most commonly used security system to protect passwords over the ... A team at the Federal Institute for Technology in Lausanne said they had ... "It is the first time we have noticed a security problem in the SSL protocol ... SSL works by encrypting a password or credit card number, ...
      (sci.crypt)
    • Re: Webvpnportforward
      ... A little more research and they are doing an SSL Vpn. ... These entries eventually auto populate inside a Java window. ... I know the technology is based on Java. ...
      (microsoft.public.isa)
    • Re: if I encrypt key data why do I want or need SSL?
      ... SSL is a proven technology and had a lot of smart ... roll your own. ... own end up regretting it. ...
      (microsoft.public.dotnet.security)