Re: Apache http ssl certificate - export -- MIDRANGE-L

Good News Everybody!

The new search engine is LIVE!

Please report any problems to david (at) midrange.com.

Subject: Re: Apache http ssl certificate - export
From: Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 28 Apr 2020 16:02:19 -0600
List-archive: <https://archive.midrange.com/midrange-l/>
List-help: <mailto:midrange-l-request@lists.midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.lists.midrange.com>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

On Tue, Apr 28, 2020 at 3:51 PM Jay Vaughn <jeffersonvaughn@xxxxxxxxx>
wrote:

you guys are a gift...

awwwwwwwwwww .... :)

which ONLY allows those I give this certificate to to pass into my apache
http server...
and in my eyes, this creates a form of authentication/authorization... no?

NO. The server cert is ONLY an ASSERTION OF IDENTITY. If a bad player wants
to IGNORE it or ACCEPT IT WITHOUT PROOF they are FREE TO DO SO.

*No server protection at all is provided by the server cert!*

It's a way of protecting the CLIENT and assuring them that they are really
talking to the system they think they have connected to!

Follow-Ups:

Re: Apache http ssl certificate - export , Jay Vaughn

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.