RE: SSL vs. VPN

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

You don't.  VPN open a secure door to your entire network.  SSL open a
secure path to a peculiar service.  SSL open the door to the public in a way
that no-one can (hopefully) decipher.  VPN is more private and thus more
secure.  You only issue certificates to those you know and trust, hopefully.

Someone listening at the begging of a SSL session can potentially get your
keys and decrypt your whole session.

Christopher K. Bipes    mailto:ChrisB@Cross-Check.com
Sr. Programmer/Analyst  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.        http://www.cross-check.com
6119 State Farm Drive   Phone: 707 586-0551 x 1102
Rohnert Park CA  94928  Fax: 707 586-1884

If consistency is the hobgoblin of little minds, only geniuses work here.
Karen Herbelin - Readers Digest 3/2000

-----Original Message-----
From: Jerome Draper [mailto:jdraper@wco.com]
Sent: Wednesday, November 15, 2000 2:20 PM
To: midrange-l@midrange.com
Subject: SSL vs VPN


The way I understand it SSL and VPN are essentially both doing the same job
and you would use one or the other.  I can download the VPN client as part
of dialup networking from Microsoft.  VPN is typically part of my
superappliance that hangs on the edge of my LAN.  This superappliance does
routing, firewall, multiple connection methods (ie:  T1, ISDN, DSL, leased
line, etc.).  

I dial my ISP; I startup my VPN client and hit my superappliance; I fire up
my TN5250 client and hit my AS400.  Why do I need SSL?

Wondering.....


Jerry

Jerry Draper, Trilobyte Software Systems, since 1976
Specializing in connecting PC's, Windows, MAC's, and LAN's to the AS/400
Representing Synapse, Apple, UDS, Nlynx, Perle, Lucent, etc.
(415) 457-3431; (415) 258-1658fax; jdraper@wco.com
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---