In message <[EMAIL PROTECTED]>, mark
@hockey.net writes:
>On Fri, 3 Aug 2001, Dave Warren wrote:
>> I don't have five hundred dollars laying around to get five certs for my
>> servers, all of which answer to several hostnames under
>> *.devilsplayground.net. The apps I use need to have a root URL of / they
>> cannot sit under /appname/ so as a result, vhosts is the only way to go.
>
>You could do what tucows does, but different.. :) When you connect to the
>reseller interface, its insecure, but then it appears to open a full-sized
>frame in the window to the tor secure server.
Yeah, we actually do this for our perl client scripts so that
output can be unbuffered. This way, we still get the security
of SSL without its handicaps.
>What would happen if you directed the user to a particular sub directory
>on the secure server, then open a frame to another virtual server in a
>full-size frame?
Nothing, I can assure you. The browser complains if images and
page elements come from insecure locations, but not entire frames.
Cengiz Akinli
Netmar, Inc.
Registry Service Complaint Clearinghouse - http://rscch.com/
Get your complaint in front of the people that matter.
