Only if OWA runs on the same box as Exchange. If OWA runs on a separate
server, you can't use NTLM (or WIA as you call it). You have to use basic
(clear text) authentication.
SSL is always better than no-SSL.
One last comment: it's not a VPN vs SSL debate. You can use both. Light
users who only need email access can use OWA+SSL and heavy hardcore
workaholics that make lazy bastards like myself look bad can use VPN and
take their laptops even to their bathroom [1] if they choose to.
S.
[1] I actually worked with a fellow who would call in sick with diarrhea and
then bill for 8 hours claiming he took his laptop to the bathroom and
programmed all day.
-----Original Message-----
From: Robert Moore [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 10:06 AM
To: Exchange Discussions
Subject: RE: SSL Question
The books say it works.
Rob
-----Original Message-----
From: Renouf, Phillip [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 9:50 AM
To: Exchange Discussions
Subject: RE: SSL Question
In my opinion it is not wise to not use SSL if you are using OWA across the
internet.
The issue isn't whether you are communicating anything which is secret, the
issue is someone catching your passwords and using those to further break
in. Does WIA actually work across OWA? I didn't think it did.
Phil
> We currently don't use SSL for our remote OWA transactions,
> though we do use
> Windows Integrated Authentication to encrypt passwords. We
> are not carrying
> on communication which it's critical to have encrypted, so I made the
> judgement that encrypting everything wasn't worth the overhead of SSL.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
