WebApp Sec mailing list archives

RE: key storage


From: Frank Knobbe <frank () knobbe us>
Date: Sat, 04 Sep 2004 13:57:17 -0500

On Sat, 2004-09-04 at 13:53, Frank Knobbe wrote:
Shops with SSL terminating load-balancers (for intrusion detection
reasons) already take advantage of that... although they are mostly
unaware of that :)


In all fairness I should mention that these shop lose the advantage of
SSL to the server which allows an intruder to sniff the traffic at the
server. But at least they don't get the certificate.

Of course the question is, which is more important. Confidentiality of
the key, or confidentiality of the date you are trying to protect :)

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: