| Chris Hedemark on Thu, 17 Apr 2003 07:13:10 -0400 |
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
And then there's the fact that SSL doesn't get enabled alternately because the Windows admin doesn't know how to gen SSL certificates, or because it "puts too much load on the server" to do crypto... Well, it's a discussion we can take off-list, but setting up an in-house CA and doing an audit of network services that should be SSL enabled would be a very worthwhile project. If the UNIX goons are better equipped to facilitate that than the Windows guys, we can help them out. I don't think his servers are going to care if the certs were generated on a Linux box. Crypto overhead is a real issue when doing lots of SSL but easily offloaded, at least in many cases, to hardware accelerators that can be attractively inexpensive. http://soekris.com/vpn1201.htm You're not the only one looking at alternatives. $NETWORK_GUY (we probably could just get away with first names here, Chris... though maybe that'd get confusing in this context ;^>... in any case, the only person who'd notice PLUG commentary is Barry). Ahem, $NETWORK_GUY threw the recent Oracle Exchange alternative advertising off as a serious consideration to $CTO. It sounds like there are a number of individuals who are talking to management but not to each other. Perhaps if we presented a unified front? At our employer, Chris, it's not worth the brain power. Help me bitch about getting IMAP/SSL (or SASL, or TSL... I really just don't care, since mutt can do them all) working, go on with life. There are far better things (I dunno... fixing Cold Fusion? ;^>) to be doing. Better as in "better for the company". Well, yes, there are a lot of places we should be using SSL, SASL or TLS but we're not. Yet another project that costs nothing in capital expense nevertheless needs to go up and down the chain of command for a lengthy review process. - -- (See mail headers for more info) "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." - Benjamin Franklin -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (Darwin) iEYEARECAAYFAj6ejBEACgkQYPuF4Zq9lvZXkACbBmeH9A2H0eQy1eV8qnSZZKp6 oYwAn3MLPD3kyrtJUW5VvnaU2yBtn4Zc =wjKG -----END PGP SIGNATURE----- _________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce General Discussion -- http://lists.netisland.net/mailman/listinfo/plug
|
|