RE: RPC over HTTP security

From: Killian Doyle (KDoyle_at_Systemhouse.ie)
Date: 01/28/05

  • Next message: Rob McShinsky: "PKI Documentation" 
    Date: Fri, 28 Jan 2005 18:05:14 -0000
To: <security-basics@securityfocus.com>

    Hi has anybody had any issues trying to get RPC over HTTP to work with
    SEF 7 ?

    -----Original Message-----
    From: Kevin Doheny [mailto:kdoheny@CNP.net]
    Sent: 28 January 2005 13:06
    To: Shawn Wall; sf_mail_sbm@yahoo.com; security-basics@securityfocus.com
    Subject: RE: RPC over HTTP security

    SSL in and of itself provides very little security... Way to easy to
    hack. Look into a Neoteris (now Juniper) SSL VPN/Proxy. This way evil
    hack3r can not ride the SSL stream into your network and past any IDS or
    IPS systems.

    Kevin

    -----Original Message-----
    From: Shawn Wall [mailto:sjwall@shaw.ca]
    Sent: Wednesday, January 26, 2005 11:04 PM
    To: sf_mail_sbm@yahoo.com; security-basics@securityfocus.com
    Subject: RE: RPC over HTTP security

    Are you using Exchange? Why not use OWA and secure it with SSL?

    shawn

    -----Original Message-----
    From: sf_mail_sbm@yahoo.com [mailto:sf_mail_sbm@yahoo.com]
    Sent: Wednesday, January 26, 2005 6:03 AM
    To: security-basics@securityfocus.com
    Subject: RPC over HTTP security

    Hi List,
    We are thinking about deploying RPC over HTTP to access email from the
    Internet

    Wanted to get some information on the technology and the security
    implications of same

    Not much info from Microsoft's site

    any help would be greatly apreciated

    Thanks,
    Ronish

  • Next message: Rob McShinsky: "PKI Documentation"

    Relevant Pages

    • RE: RPC over HTTP security
      ... Subject: RPC over HTTP security ... probably trillions of dollars are transacted via SSL. ... not offer the server much security, if anything it reduces it for the server ...
      (Security-Basics)
    • RE: RPC over HTTP security
      ... Never knew SSL was so secure.. ... Subject: RPC over HTTP security ... Why not use OWA and secure it with SSL? ...
      (Security-Basics)
    • Re: RPC over HTTP security
      ... We ran OWA with SSL, didn't mean our server didn't get owned by a hacker. ... Subject: RPC over HTTP security ...
      (Security-Basics)
    • RE: RPC over HTTP security
      ... Why not use OWA and secure it with SSL?" ... SSL does not provide Authentication, correct, but it does ... Subject: RPC over HTTP security ...
      (Security-Basics)
    • rpcssl version 0.1
      ... Announcing release 0.1 of librpcssl, a C library for making RPC (remote ... procedure calls) using SSL for security. ... authentication mechanisms. ... support for strong encryption and authentication, ...
      (comp.os.linux.announce)