Re: which security protocol for dealing with this situation

ben@xxxxxxxxxxxxxx writes:
It's a fairly hyperthetical situation at the moment -- I'm designing a
piece of software which I intend to write. I'm intending making it
cross platform: Windows, Unix inc. Mac and Linux. The mobile device at
the moment in my mind is not Windows or anything like that, it just
has a web browser, but, by the time I've written this software mobile
phones will probably have developed somewhat so installing a utility/
app written for this will be much more feasible. Let's assume we're
talking about a mobile device which has a web browser with JavaScript
etc. and that's how the commincation will take place. Possible? If
with web browser not possible then assume specifically written utility/
app for mobile device is possible.


An SSL certificate on the "base" computer's web server would provide
this verification that you're talking to the compute ryou think you
are.

And DynDNS sells them:
http://www.dyndns.com/services/sslcert/


The "real" server assumably would be the only one running the web
server with the SSL certificate issued to whatever.dyndns.org

So long as hasty users don't click through any warning boxes about
mismatching certificates, and so long as a certificate authority
trusted by the web browser in question doesn't issue a bad guy a
certificate for someone else' dyndns domain, I think you're where you
wanna be.


--
Todd H.
http://www.toddh.net/
.

Relevant Pages

  • Re: I-Mate KJAM
    ... Exchange on Windows SBS Server 2003. ... Configure a Self-Signed Certificate ... Perform the following steps to install the certificate on a mobile device: ... Create a shared folder in which to store the certificate. ...
    (microsoft.public.windows.server.sbs)
  • Re: which security protocol for dealing with this situation
    ... the real base machine and the mobile user to make sure each other are ... Windows, ... talking about a mobile device which has a web browser with JavaScript ...
    (comp.security.misc)
  • Re: I-Mate KJAM
    ... a reasonable self generated certificate. ... Exchange on Windows SBS Server 2003. ... Create a shared folder in which to store the certificate. ... Install the certificate on the Windows Mobile device. ...
    (microsoft.public.windows.server.sbs)
  • Re: I-Mate KJAM
    ... Exchange on Windows SBS Server 2003. ... If you don't have a trusted third party SSL certificate installed in SBS (as ... Perform the following steps to install the certificate on a mobile device: ... Create a shared folder in which to store the certificate. ...
    (microsoft.public.windows.server.sbs)
  • Need Suggestions on web server security using SSL.
    ... device that uses remote web browser configuring. ... could be multiple devices on the network. ... our knowledge of using SSL. ... figure out is that an SSL certificate is bound by the ID of the box. ...
    (microsoft.public.windowsxp.embedded)