There's also the option of setting up a tunnel using e.g. SSH, or some VPN
solution.

-------------------------------------------------------------
Hugo Ahlenius                  E-Mail: [EMAIL PROTECTED]
Project Officer                Phone:            +46 8 230460
UNEP GRID-Arendal              Fax:              +46 8 230441
Stockholm Office               Mobile:         +46 733 467111
                               WWW:       http://www.grida.no
-------------------------------------------------------------

----------------------------
| On Friday, November 28, 2003 16:47 [GMT+1=CET],
| Tom Kitta <[EMAIL PROTECTED]> wrote:

>> I am not aware of any supported option short of rolling your own
>> browser.
>> Thus, propose to this client writing a custom browser with their
>> choice of
>> security. Just make sure to show him the estimate for the project
>> cost.
>>
>> TK
>>   -----Original Message-----
>>   From: John McCosker [mailto:[EMAIL PROTECTED]
>>   Sent: Friday, November 28, 2003 10:32 AM
>>   To: CF-Talk
>>   Subject: RE: Securing user login details
>>
>>
>>   Thanks, the client is from Pakistan and is totally opinionated on
>> this.
>>
>>
>>   Thanks for the advice.
>>
>>   -----Original Message-----
>>   From: Craig Dudley [mailto:[EMAIL PROTECTED]
>>   Sent: 28 November 2003 14:59
>>   To: CF-Talk
>>   Subject: RE: Securing user login details
>>
>>   I would have to agree, 128 bit SSL is very secure.
>>
>>   1 Someone has get the data to try and decode it, which isn't easy
>>   at all, then they have to crack a 128 bit key, which is extremely
>> hard.
>>
>>   I would suggest simply finding out more about SSL and explaining
>>   quite how safe 128 bit SSL really is to your client.
>>
>>   -----Original Message-----
>>   From: Kwang Suh [mailto:[EMAIL PROTECTED]
>>   Sent: 27 November 2003 18:01
>>   To: CF-Talk
>>   Subject: RE: Securing user login details
>>
>>   Doesn't trust SSL?  SSL is quite secure.
>>
>>   -----Original Message-----
>>   From: John McCosker [mailto:[EMAIL PROTECTED]
>>   Sent: November 27, 2003 2:11 AM
>>   To: CF-Talk
>>   Subject: RE: Securing user login details
>>
>>   No, I only want the http request made for logins secured, but
>>   our client
>>   does not like the idea of using SSL.
>>   So if there are any other areas to investigate, I would give
>>   them a try.
>>
>>   -----Original Message-----
>>   From: Tom Kitta [mailto:[EMAIL PROTECTED]
>>   Sent: 27 November 2003 02:03
>>   To: CF-Talk
>>   Subject: Re: Securing user login details
>>
>>   Please be more specific, you want user to browse material that
>>   you want to
>>   be encrypted? I.e. another way of implementing https?
>>
>>   TK
>>     ----- Original Message -----
>>     From: John McCosker
>>     To: CF-Talk
>>     Sent: Wednesday, November 26, 2003 5:17 AM
>>     Subject: Securing user login details
>>
>>     Hi,
>>
>>     is there an alternative way to secure (encrypt) user login
>>   details along
>>   the
>>     wire
>>     than SSL. We have a client who wants security but does not
>>   trust SSL.
>>
>>     Is there anything out there I can look into.
>>
>>     Thanx, J
>>
>>     _____
>>
>>     _____
>>
>>     _____
>>
>>     _____
>>
>>
>>
>>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to