But Ed wouldn't a VPN require transport or tunnel peering?  This probably
wouldn't be realistic from all locations.  If all sessions are from
administrable hosts then I'd agree that a vpn would be ideal.  Maybe i'm
missing something. more info would help.

Rob, either way, given the cost and flexibility I'd use ssl for OWA.
Overhead would be contingent on your pipes, etc, but probably won't be an
issue.  As you know, right now the payload of your http transactions is "in
the clear".  

my thoughts.byron 

-----Original Message-----
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 4:35 PM
To: Exchange Discussions
Subject: RE: SSL Question


No.  You're stupid not to be employing a VPN.

Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation
All your base are belong to us.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Moore
Sent: Friday, August 10, 2001 6:58 AM
To: Exchange Discussions
Subject: SSL Question


Hello all--

We currently don't use SSL for our remote OWA transactions, though we do use
Windows Integrated Authentication to encrypt passwords. We are not carrying
on communication which it's critical to have encrypted, so I made the
judgement that encrypting everything wasn't worth the overhead of SSL.

So, I guess my question is, Is that judgement wrong? Are we really stupid
not to be using SSL on OWA?

Rob
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rob Moore
Network Administrator
The Agnes Irwin School
[EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to