Security Basics mailing list archives
IP authentication vs. Certificate authentication
From: netethix () iprimus com au
Date: Mon, 3 Nov 2003 02:33:46 +0000
Hi all, Been asked to provide a 1 pager of pros and cons around IP-based authentication and certificate-based authentication. I've stated that IP authentication is subject to a number of exploits within the protocol such as IP spoofing, IP piggybacking, and that with certificate-based authentication it can be used to provide proof of identity. Can anyone else come up with any other compelling reasons for or against either one, in the context of IP vs. certificate authentication? Assume anything you like, so be as broad or specific as you like. Any thoughts gratefully accepted. Netethix Nigel Hedges IT Security Consultant Mobile: 0413 483 436 Email: netethix () iprimus com au --------------------------------------------------------------------------- Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE The Presidio integrates PGP data encryption and XML Web Services security to simplify the management and deployment of PGP and reduce overall PGP costs by up to 80%. FREE WHITEPAPER & 30 Day Trial - http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 ----------------------------------------------------------------------------
Current thread:
- IP authentication vs. Certificate authentication netethix (Nov 03)
- Re: IP authentication vs. Certificate authentication Francisco Andrades (Nov 03)
- Re: IP authentication vs. Certificate authentication Kevin Saenz (Nov 04)