On Tue, 23 Oct 2001, David Lang wrote:

> doing strong authentication for http/https is far from simple.

It depends- if you're into something like proxy-pass (basically reframing
a site) and you do persistant https to the proxy, then it's not that
difficult to do- if you want transparancy, or full off-the-shelf browser
functionality, then it's more difficult.

> > There are some proxy projects around- I'm not sure how strong any of the
> > auth stuff is though.  These days you can almost get away with just
> > supporting http/https though.
> 
> only if what you are trying to support is internet access, for internal
> firewalls you end up needing a lot more.

I didn't last time I did it as a WAN solution- http/https for "intranet
servers," https was fine for Lotus Notes as well, we added SMTP as I
recall, and had some non-notes replication over HTTP upload/download with
some custom code.  Obviously YMMV.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to